Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Don't run antimalware programs against ActiveX controls

The `REG_DWORD` value `270C` controls antimalware checking of ActiveX controls for webpages in the Internet zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\270C
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\270C

The REG_DWORD value 270C controls antimalware checking of ActiveX controls for webpages in the Internet zone. Zone number 3 identifies the Internet zone.

The supported value data has the following meaning:

  • 0: Internet Explorer consults the antimalware program before creating an instance of the ActiveX control.
  • 3: Internet Explorer skips this antimalware check.

When the value is absent, this policy registry entry does not enforce either behavior. The setting controls only the antimalware check. It does not independently permit an ActiveX control to be downloaded, installed, or run; the other ActiveX and security-zone settings continue to apply.

Notes

Security

A value of 3 removes an additional safeguard before an ActiveX control is instantiated. A malicious control that is otherwise permitted can therefore no longer be detected and rejected through this particular check. This is especially significant in the Internet zone, where content should not be assumed to be trustworthy.

A value of 0 requests the check but does not guarantee detection of every malicious control. Conversely, 3 does not disable the installed antimalware product globally or turn off other Windows or Internet Explorer protection mechanisms.

Notes

The two registry locations represent the computer and user scopes of the same policy. If the separate “Security Zones: Use only machine settings” policy is in effect, only the computer-level security-zone settings are used.

This setting belongs to the Internet Explorer security-zone model. Microsoft Edge does not support ActiveX controls in its normal Chromium engine. Internet Explorer mode does support ActiveX controls and Internet Explorer policies that affect security-zone settings.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – InternetZoneDoNotRunAntimalwareAgainstActiveXControls

Microsoft Learn: What is Internet Explorer (IE) mode?

See also