Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

MSFT Internet Explorer 11 - Computer
Data collected on: 9/19/2022 8:28:36 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 12/12/2019 5:54:24 AM
Modified | 9/29/2021 6:46:10 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {D5398278-ABE5-4648-921E-D68A15AF59E9}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
MSFT Clients | No | Enabled | security.local/MSFT Clients
SCT Domain Controller | No | Enabled | security.local/SCT Domain Controller
SCT Member Server | No | Enabled | security.local/SCT Member Server

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Windows Components/Internet Explorer

Policy | Setting | Comment
--- | --- | ---
Prevent bypassing SmartScreen Filter warnings | Enabled |
Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet | Enabled |
Prevent managing SmartScreen Filter | Enabled |
Select SmartScreen Filter mode | On
Policy | Setting | Comment
Prevent per-user installation of ActiveX controls | Enabled |
Security Zones: Do not allow users to add/delete sites | Enabled |
Security Zones: Do not allow users to change policies | Enabled |
Security Zones: Use only machine settings | Enabled |
Specify use of ActiveX Installer Service for installation of ActiveX controls | Enabled |
Turn off Crash Detection | Enabled |
Turn off the Security Settings Check feature | Disabled |

Windows Components/Internet Explorer/Internet Control Panel

Policy | Setting | Comment
--- | --- | ---
Prevent ignoring certificate errors | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Advanced Page

Policy | Setting | Comment
--- | --- | ---
Allow software to run or install even if the signature is invalid | Disabled |
Check for server certificate revocation | Enabled |
Check for signatures on downloaded programs | Enabled |
Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled | Enabled |
Turn off encryption support | Enabled |
Secure Protocol combinations | Use TLS 1.1 and TLS 1.2
Policy | Setting | Comment
Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | Enabled |
Turn on Enhanced Protected Mode | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page

Policy | Setting | Comment
--- | --- | ---
Intranet Sites: Include all network paths (UNCs) | Disabled |
Turn on certificate address mismatch warning | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone

Policy | Setting | Comment
--- | --- | ---
Access data sources across domains | Enabled |
Access data sources across domains | Disable
Policy | Setting | Comment
Allow cut, copy or paste operations from the clipboard via script | Enabled |
Allow paste operations via script | Disable
Policy | Setting | Comment
Allow drag and drop or copy and paste files | Enabled |
Allow drag and drop or copy and paste files | Disable
Policy | Setting | Comment
Allow loading of XAML files | Enabled |
XAML Files | Disable
Policy | Setting | Comment
Allow only approved domains to use ActiveX controls without prompt | Enabled |
Only allow approved domains to use ActiveX controls without prompt | Enable
Policy | Setting | Comment
Allow only approved domains to use the TDC ActiveX control | Enabled |
Only allow approved domains to use the TDC ActiveX control | Enable
Policy | Setting | Comment
Allow scripting of Internet Explorer WebBrowser controls | Enabled |
Internet Explorer web browser control | Disable
Policy | Setting | Comment
Allow script-initiated windows without size or position constraints | Enabled |
Allow script-initiated windows without size or position constraints | Disable
Policy | Setting | Comment
Allow scriptlets | Enabled |
Scriptlets | Disable
Policy | Setting | Comment
Allow updates to status bar via script | Enabled |
Status bar updates via script | Disable
Policy | Setting | Comment
Allow VBScript to run in Internet Explorer | Enabled |
Allow VBScript to run in Internet Explorer | Disable
Policy | Setting | Comment
Automatic prompting for file downloads | Enabled |
Automatic prompting for file downloads | Disable
Policy | Setting | Comment
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Download signed ActiveX controls | Enabled |
Download signed ActiveX controls | Disable
Policy | Setting | Comment
Download unsigned ActiveX controls | Enabled |
Download unsigned ActiveX controls | Disable
Policy | Setting | Comment
Enable dragging of content from different domains across windows | Enabled |
Enable dragging of content from different domains across windows | Disable
Policy | Setting | Comment
Enable dragging of content from different domains within a window | Enabled |
Enable dragging of content from different domains within a window | Disable
Policy | Setting | Comment
Include local path when user is uploading files to a server | Enabled |
Include local directory path when uploading files to a server | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java
Policy | Setting | Comment
Launching applications and files in an IFRAME | Enabled |
Launching applications and files in an IFRAME | Disable
Policy | Setting | Comment
Logon options | Enabled |
Logon options | Prompt for user name and password
Policy | Setting | Comment
Navigate windows and frames across different domains | Enabled |
Navigate windows and frames across different domains | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components not signed with Authenticode | Enabled |
Run .NET Framework-reliant components not signed with Authenticode | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components signed with Authenticode | Enabled |
Run .NET Framework-reliant components signed with Authenticode | Disable
Policy | Setting | Comment
Show security warning for potentially unsafe files | Enabled |
Launching programs and unsafe files | Prompt
Policy | Setting | Comment
Turn on Cross-Site Scripting Filter | Enabled |
Turn on Cross-Site Scripting (XSS) Filter | Enable
Policy | Setting | Comment
Turn on Protected Mode | Enabled |
Protected Mode | Enable
Policy | Setting | Comment
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable
Policy | Setting | Comment
Use Pop-up Blocker | Enabled |
Use Pop-up Blocker | Enable
Policy | Setting | Comment
Userdata persistence | Enabled |
Userdata persistence | Disable
Policy | Setting | Comment
Web sites in less privileged Web content zones can navigate into this zone | Enabled |
Web sites in less privileged Web content zones can navigate into this zone | Disable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | High safety

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Local Machine Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Internet Zone

Policy | Setting | Comment
--- | --- | ---
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Intranet Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Local Machine Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Restricted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java
Policy | Setting | Comment
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Trusted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Access data sources across domains | Enabled |
Access data sources across domains | Disable
Policy | Setting | Comment
Allow active scripting | Enabled |
Allow active scripting | Disable
Policy | Setting | Comment
Allow binary and script behaviors | Enabled |
Allow Binary and Script Behaviors | Disable
Policy | Setting | Comment
Allow cut, copy or paste operations from the clipboard via script | Enabled |
Allow paste operations via script | Disable
Policy | Setting | Comment
Allow drag and drop or copy and paste files | Enabled |
Allow drag and drop or copy and paste files | Disable
Policy | Setting | Comment
Allow file downloads | Enabled |
Allow file downloads | Disable
Policy | Setting | Comment
Allow loading of XAML files | Enabled |
XAML Files | Disable
Policy | Setting | Comment
Allow META REFRESH | Enabled |
Allow META REFRESH | Disable
Policy | Setting | Comment
Allow only approved domains to use ActiveX controls without prompt | Enabled |
Only allow approved domains to use ActiveX controls without prompt | Enable
Policy | Setting | Comment
Allow only approved domains to use the TDC ActiveX control | Enabled |
Only allow approved domains to use the TDC ActiveX control | Enable
Policy | Setting | Comment
Allow scripting of Internet Explorer WebBrowser controls | Enabled |
Internet Explorer web browser control | Disable
Policy | Setting | Comment
Allow script-initiated windows without size or position constraints | Enabled |
Allow script-initiated windows without size or position constraints | Disable
Policy | Setting | Comment
Allow scriptlets | Enabled |
Scriptlets | Disable
Policy | Setting | Comment
Allow updates to status bar via script | Enabled |
Status bar updates via script | Disable
Policy | Setting | Comment
Allow VBScript to run in Internet Explorer | Enabled |
Allow VBScript to run in Internet Explorer | Disable
Policy | Setting | Comment
Automatic prompting for file downloads | Enabled |
Automatic prompting for file downloads | Disable
Policy | Setting | Comment
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Download signed ActiveX controls | Enabled |
Download signed ActiveX controls | Disable
Policy | Setting | Comment
Download unsigned ActiveX controls | Enabled |
Download unsigned ActiveX controls | Disable
Policy | Setting | Comment
Enable dragging of content from different domains across windows | Enabled |
Enable dragging of content from different domains across windows | Disable
Policy | Setting | Comment
Enable dragging of content from different domains within a window | Enabled |
Enable dragging of content from different domains within a window | Disable
Policy | Setting | Comment
Include local path when user is uploading files to a server | Enabled |
Include local directory path when uploading files to a server | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java
Policy | Setting | Comment
Launching applications and files in an IFRAME | Enabled |
Launching applications and files in an IFRAME | Disable
Policy | Setting | Comment
Logon options | Enabled |
Logon options | Anonymous logon
Policy | Setting | Comment
Navigate windows and frames across different domains | Enabled |
Navigate windows and frames across different domains | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components not signed with Authenticode | Enabled |
Run .NET Framework-reliant components not signed with Authenticode | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components signed with Authenticode | Enabled |
Run .NET Framework-reliant components signed with Authenticode | Disable
Policy | Setting | Comment
Run ActiveX controls and plugins | Enabled |
Run ActiveX controls and plugins | Disable
Policy | Setting | Comment
Script ActiveX controls marked safe for scripting | Enabled |
Script ActiveX controls marked safe for scripting | Disable
Policy | Setting | Comment
Scripting of Java applets | Enabled |
Scripting of Java applets | Disable
Policy | Setting | Comment
Show security warning for potentially unsafe files | Enabled |
Launching programs and unsafe files | Disable
Policy | Setting | Comment
Turn on Cross-Site Scripting Filter | Enabled |
Turn on Cross-Site Scripting (XSS) Filter | Enable
Policy | Setting | Comment
Turn on Protected Mode | Enabled |
Protected Mode | Enable
Policy | Setting | Comment
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable
Policy | Setting | Comment
Use Pop-up Blocker | Enabled |
Use Pop-up Blocker | Enable
Policy | Setting | Comment
Userdata persistence | Enabled |
Userdata persistence | Disable
Policy | Setting | Comment
Web sites in less privileged Web content zones can navigate into this zone | Enabled |
Web sites in less privileged Web content zones can navigate into this zone | Disable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | High safety

Windows Components/Internet Explorer/Security Features

Policy | Setting | Comment
--- | --- | ---
Allow fallback to SSL 3.0 (Internet Explorer) | Enabled |
Allow insecure fallback for: | No Sites

Windows Components/Internet Explorer/Security Features/Add-on Management

Policy | Setting | Comment
--- | --- | ---
Remove "Run this time" button for outdated ActiveX controls in Internet Explorer | Enabled |
Turn off blocking of outdated ActiveX controls for Internet Explorer | Disabled |

Windows Components/Internet Explorer/Security Features/Consistent Mime Handling

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Mime Sniffing Safety Feature

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/MK Protocol Security Restriction

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Notification bar

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Protection From Zone Elevation

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Restrict ActiveX Install

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Restrict File Download

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Scripted Window Security Restrictions

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

User Configuration (Disabled)
No settings defined.