Don't run antimalware programs against ActiveX controls
This policy determines whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control for a page in the Trusted Sites zone.
since 0.9.8.11
Purpose
Show registry keys (2)
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\270CHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\270C
This policy determines whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control for a page in the Trusted Sites zone.
When the policy is enabled, Internet Explorer does not perform this security check. When it is disabled, Internet Explorer always asks the antimalware program to evaluate the ActiveX control.
If the policy is not configured, the check is not performed by default in the Trusted Sites zone. Users can then change the behavior through Internet Explorer security settings.
Notes
Security
Enabling the policy removes a layer of protection from ActiveX control instantiation. A malicious or tampered control can consequently be loaded without first being evaluated by the integrated antimalware program. This is particularly relevant if a trusted-zone site is compromised or an untrusted site is mistakenly assigned to that zone.
The policy does not independently permit ActiveX controls to be downloaded, installed, or run. Those operations remain subject to other ActiveX, security-zone, and control-specific restrictions.
Notes
The 270C registry value under Zones\2 applies only to the Trusted Sites zone. The HKLM and HKCU locations represent the device and user scopes of the policy, respectively.
This is an Internet Explorer technology policy. It can remain relevant to pages rendered with the Trident/MSHTML engine in Microsoft Edge IE mode. Regular pages rendered by the Chromium-based Microsoft Edge engine do not support ActiveX controls.
Microsoft documentation
Microsoft Learn: What is Internet Explorer mode?