Allow scriptlets

Purpose

Show registry keys (2)

• HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1209
• HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1209

This ADMX-backed policy controls whether scriptlets may run in the Internet Explorer Restricted Sites security zone. Zone number 4 refers specifically to that zone.

The 1209 value is a REG_DWORD. A value of 0 allows scriptlets to run, while 3 prevents them from running. When the policy is not defined, users can change the corresponding zone setting themselves.

The setting applies only to content assigned to the Restricted Sites zone. It does not independently enable active scripting, ActiveX controls, or other content features that may be blocked by separate zone policies.

Notes

Security

Allowing scriptlets relaxes a safeguard for sites classified as untrusted or potentially harmful. If the hosting application supports this legacy Internet Explorer technology, content from those sites can use scriptlets. The actions available to that content still depend on the host application, installed components, and other security and permission controls.

Blocking scriptlets closes this execution path but does not replace the zone's other security restrictions.

Possible side effects

Blocking scriptlets can impair legacy web applications or embedded web content that depends on scriptlets and is assigned to the Restricted Sites zone.

Notes

The HKLM entry represents the device-scoped policy, while the HKCU entry represents the user-scoped policy. This setting belongs to the legacy Internet Explorer security-zone infrastructure and has an effect only in applications or components that consult that infrastructure and support scriptlets.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowScriptlets

See also

• Entry in the reference