Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Don't run antimalware programs against ActiveX controls

The `270C` value controls whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\270C
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\270C

The 270C value controls whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control. It applies only to pages assigned to the Local intranet zone (Zones\1).

The value uses the REG_DWORD data type. A value of 0 enables antimalware checking, while 3 suppresses the check. This setting does not independently allow or block ActiveX controls. Their execution remains subject to the other ActiveX, security-zone, and permission settings.

Notes

Security

A value of 3 removes a security check that would otherwise occur before an ActiveX instance is created. A malicious or compromised control can therefore run without that antimalware assessment if its execution is permitted by the remaining policies and permissions.

A value of 0 causes Internet Explorer to involve the registered antimalware program in the safety assessment. This provides an additional layer of protection, but it neither guarantees that a control is safe nor grants the control any additional execution rights.

Notes

If the policy value is absent, it does not enforce either behavior. Microsoft documents that, for the Local intranet zone, Internet Explorer does not perform this antimalware check by default when the policy is not configured, and users can change the behavior through Internet Explorer security settings.

The corresponding ADMX policy is available in both Computer Configuration and User Configuration.

Although the standalone Internet Explorer desktop application has been retired on certain Windows versions, Internet Explorer security-zone settings can remain relevant to pages running in Microsoft Edge Internet Explorer mode. Microsoft Edge does not use this ActiveX-specific setting for pages rendered outside IE mode.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – IntranetZoneDoNotRunAntimalwareAgainstActiveXControls

Microsoft Learn: What is Internet Explorer mode?

See also