Did you type it in or copy/paste? Only copy/paste is blocked. Also, keep in mind this is a new feature in IE9.

Edit: Just tested again on Windows 7. Pasting javascript:alert(1) caused the javascript: part of the URI to be stripped.