Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Run .NET Framework-reliant components signed with Authenticode

This registry value controls the `URLACTION_MANAGED_SIGNED` URL action for the Internet Explorer Internet zone.

since 0.9.8.11

Purpose

Show registry keys (2)
  • HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2001
  • HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2001

This registry value controls the URLACTION_MANAGED_SIGNED URL action for the Internet Explorer Internet zone. It determines whether Authenticode-signed managed .NET Framework components may run. The affected components include managed controls referenced by an object element and managed executables referenced by a link.

The value uses the REG_DWORD type. Its supported policy values have the following meanings:

  • 0: Allow the signed managed component to run without prompting.
  • 1: Prompt the user to decide whether the component may run.
  • 3: Prevent the component from running.

When the policy is not configured, Internet Explorer allows these signed managed components by default.

Notes

Security

A value of 0 permits active managed code supplied by Internet-zone websites to execute within the security context provided to the component by Internet Explorer and the .NET Framework.

A valid Authenticode signature establishes information about the publisher and the integrity of the signed code. It does not guarantee that the code is safe or free of defects. Value 1 therefore adds a user decision, while value 3 removes this execution path for the Internet zone.

The setting applies only to this action in the Internet zone. It does not block other forms of executable web content, equivalent components assigned to other security zones, or execution outside an Internet Explorer context.

Possible side effects

Value 3 can prevent legacy web applications from working when they depend on signed managed controls or managed programs launched through links. Value 1 can interrupt these applications with security prompts and makes execution dependent on the user's response.

Notes

Zone key 3 represents the Internet zone. The HKLM path provides the computer-policy location, while the HKCU path provides the user-policy location.

This is a legacy Internet Explorer technology.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – InternetZoneRunNETFrameworkReliantComponentsSignedWithAuthenticode

Microsoft Learn: URL Action Flags

Microsoft Learn: URL Policy Flags

See also