I am Hari from the Browser team sharing some scenarios where web font’s icons are missing when loading web applications using these highly used web HTML font Icons ("Example: font-awesome, @font-face, graphic shell-icons, GDI fonts") and share a few informative resources.
Here is a list of key words covering the different terms used to describe the behavior.
- Website graphic shell-icons are missing
- Web font-face icon missing
- Font-awesome icons missing
- Fonts blocked when using Windows 10 Internet explorer 11
- Office 365 icons missing - right navigation doesn't display the icons
- CRM right navigation doesn't display the icons
- Yammer right navigation doesn't display the icons
- MSN icons missing
- Microsoft.com website icon missing
- Web icons missing when browsing sites using Windows 7 IE11 (see scenario II)
- OneDrive site in SharePoint the settings wheel is missing in the navigation bar
The browser team recommends you use Microsoft EDGE to avoid the described scenarios!
The missing web font icon can be missing if the Mitigation System GPO Block untrusted fonts is configured in Windows 10 operating system. To learn more about this GPO, please read the following documents. Also, know that in future Windows 10 Operating system, the “Untrusted Font Blocking” setting will be dropped. See articles below for more information!
When the Untrusted Font Blocking is implemented a few registry keys are created.
GPO Registry Location:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\MitigationOptions with the following name and value: MitigationOptions_FontBlocking*"="1000000000000"
- Block untrusted fonts in an enterprise
- GPO Reference: http://gpsearch.azurewebsites.net/#10949
- Dropping the “Untrusted Font Blocking” setting
If you were to open the F12 Developer Tools (by depressing the F12 key), under the console information you should find the following errors:
CSS3111: @font-face encountered unknown error.
CSS3114: @font-face failed OpenType embedding permission check. Permission must be Installable.
The GPO Allow Font Download is enabled. This GPO can be configured for each Internet Explore Zones: Internet, Local Intranet, Trusted Sites and Restricted Zone.
Here are all the relevant information you can use to help you determine the client have this GPO Enabled.
Configure the Allow Font Downloads IE Setting on the Internet, Restricted Zone (on by default) via GPO and add the affected Websites to the Trusted Sites or Local Intranet Zone
Policy name: Allow font downloads
Category Path: Computer Configuration or User Configuration - Administrative Templates\Windows Components\Internet Explorer\Internet\Control Panel\Security Page\Internet Zone\
Supported On: At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
Registry Key: HKLM or HKCU \Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
DESCRIPTION: This policy setting allows you to manage whether pages of the zone may download HTML fonts.
If you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.
If you disable this policy setting, HTML fonts are prevented from downloading.
If you do not configure this policy setting, HTML fonts can be downloaded automatically.
item: decimal: 0 => Enable
item: decimal: 3 => Disable
item: decimal: 1 => Prompt
TIP: While troubleshooting, we suggest to also look under the Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 0,1,2,3 zones to make sure, these have not changed if the GPO was not configured!
Know office article: Office 365 app launcher and menu bar icons are blank
If the above scenarios do not assist in resolving the missing icon issue, please make sure you Disable your Antivirus application that have also known to prevent the Fonts Icon from displaying in the IE11 browser.
If you are using Symantec DLP, please check for the below link that’s speaks about the resolution that making changes to the DLP Settings.
- https://support.symantec.com/en_US/article.TECH240808.html Known Issues for DLP Agent Support of Microsoft Windows 10 Creators Update