Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation

Restrict ActiveX Install

This setting controls the Internet Explorer feature control `FEATURE_RESTRICT_ACTIVEXINSTALL` separately for each listed Microsoft Office process.

since 0.9.8.11

Purpose

Show registry keys (14)
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\groove.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\excel.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\mspub.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\powerpnt.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\pptview.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\visio.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\winproj.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\winword.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\outlook.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\spdesign.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\exprwd.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\msaccess.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\onenote.exe
  • HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall\mse7.exe

This setting controls the Internet Explorer feature control FEATURE_RESTRICT_ACTIVEXINSTALL separately for each listed Microsoft Office process. A REG_DWORD value of 1 enables the restriction for the executable identified by that value name.

The restriction applies when an Office process uses Internet Explorer web technology and a webpage attempts to instantiate a missing ActiveX control or prompt for its installation. It also blocks an installation request for an update when the required control is not already installed. The normal ActiveX installation prompt is suppressed.

Each value affects only the process whose executable name is used as the value name. The setting therefore does not apply globally to every application or Internet Explorer component on the computer.

Notes

Security

The restriction reduces the opportunity for web content hosted by an affected Office process to initiate installation of a missing ActiveX control and persuade the user to approve it. This limits one path through which additional executable code could be introduced.

It does not disable ActiveX as a whole. By itself, it does not block controls that are already installed, prevent the general use of ActiveX controls in Office documents or other applications, or prohibit every other method of installing a control.

Possible side effects

Web content or embedded browser functionality in the affected Office applications can no longer prompt for a required ActiveX control to be installed. Features that depend on a missing or newly installed control might consequently remain unavailable or fail.

Notes

This feature is part of the Internet Explorer and URLMON infrastructure. It has an effect only when the relevant Office process uses that web technology. Windows also uses the URLACTION_AUTOMATIC_ACTIVEX_UI URL action when making zone-specific decisions.

The similarly named policy location under HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL is distinct from the application-specific values documented here under the key that does not contain Policies.

Microsoft documentation

Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses

Microsoft Learn: INTERNETFEATURELIST enumeration – FEATURE_RESTRICT_ACTIVEXINSTALL

See also