[{"data":1,"prerenderedAt":278},["ShallowReactive",2],{"doku:en:richtlinien-anhang\u002Frichtlinien-edge-internet-explorer":3},{"seite":4,"start":25,"leiste":26,"bereich":224,"zurueck":276,"weiter":277},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14},"en","richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer","referenz-richtlinien-edge-internet-explorer","Edge and Internet Explorer","Every setting of the “Edge and Internet Explorer” package with its effect, value and recommending sources.","since 0.9.8.11",true,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cp>This page lists every setting of the “Edge and Internet Explorer” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.\u003C\u002Fp>\n\u003Cp>133 settings.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"e-ef9e6616b8\">Allow only approved domains to use ActiveX controls without prompt\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>120b\u003C\u002Fcode> registry value controls the per-domain ActiveX prompt for the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong> (\u003Ccode>Zones\\4\u003C\u002Fcode>). It represents the \u003Ccode>URLACTION_ACTIVEX_OVERRIDE_DOMAINLIST\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\120b = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyonlyallowapproveddomainstouseactivexwithoutprompt-both-restricted\">Allow only approved domains to use ActiveX controls without prompt\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowonlyapproveddomainstouseactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowOnlyApprovedDomainsToUseActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-76d00e9073\">Prevent per-user installation of ActiveX controls\u003C\u002Fh3>\n\u003Cp>This policy prevents ActiveX controls from being installed on a per-user basis. When enabled, an ActiveX control cannot be installed solely for the current user account. When disabled or not configured, per-user installation remains available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Security\\ActiveX\\BlockNonAdminActiveXInstall = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-disableperuseractivexinstall\">Prevent per-user installation of ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#preventperuserinstallationofactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – PreventPerUserInstallationOfActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-685f15774a\">Userdata persistence\u003C\u002Fh3>\n\u003Cp>This setting controls user data persistence for webpages in the Internet zone. It determines whether Internet Explorer may preserve information in browser history, favorites, an XML store, or directly within a webpage saved to disk.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1606 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyuserdatapersistence-1\">Userdata persistence\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonenallowuserdatapersistence\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowUserDataPersistence\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7c08791c7d\">Allow only approved domains to use the TDC ActiveX control\u003C\u002Fh3>\n\u003Cp>This setting controls whether websites in the Restricted Sites security zone can run the Internet Explorer Tabular Data Control (TDC). TDC is an ActiveX control that enables webpages to load data from text files and bind it to HTML elements such as tables and form controls.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\120c = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowtdccontrol-both-restricted\">Allow only approved domains to use the TDC ActiveX control\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowonlyapproveddomainstousetdcactivexcontrol\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowOnlyApprovedDomainsToUseTDCActiveXControl\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a29d336fa1\">Don't run antimalware programs against ActiveX controls\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>270C\u003C\u002Fcode> value determines whether Internet Explorer consults an integrated antimalware program before creating an instance of an ActiveX control for a page in the Restricted Sites zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\270C = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyantimalwarecheckingofactivexcontrols-7\">Don't run antimalware programs against ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonedonotrunantimalwareagainstactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneDoNotRunAntimalwareAgainstActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4134053385\">Don't run antimalware programs against ActiveX controls\u003C\u002Fh3>\n\u003Cp>This policy determines whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control for a page in the Trusted Sites zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2\\270C = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyantimalwarecheckingofactivexcontrols-5\">Don't run antimalware programs against ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#trustedsiteszonedonotrunantimalwareagainstactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – TrustedSitesZoneDoNotRunAntimalwareAgainstActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8c8249564d\">Don't run antimalware programs against ActiveX controls\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>REG_DWORD\u003C\u002Fcode> value \u003Ccode>270C\u003C\u002Fcode> controls antimalware checking of ActiveX controls for webpages in the Internet zone. Zone number \u003Ccode>3\u003C\u002Fcode> identifies the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\270C = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyantimalwarecheckingofactivexcontrols-1\">Don't run antimalware programs against ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonedonotrunantimalwareagainstactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneDoNotRunAntimalwareAgainstActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1210006300\">Don't run antimalware programs against ActiveX controls\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>270C\u003C\u002Fcode> value controls whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control. It applies only to pages assigned to the Local intranet zone (\u003Ccode>Zones\\1\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1\\270C = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyantimalwarecheckingofactivexcontrols-3\">Don't run antimalware programs against ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#intranetzonedonotrunantimalwareagainstactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – IntranetZoneDoNotRunAntimalwareAgainstActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2b1e064962\">Don't run antimalware programs against ActiveX controls\u003C\u002Fh3>\n\u003Cp>This registry value determines whether Internet Explorer consults an antimalware program before creating an instance of an ActiveX control for content in the Local Machine zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0\\270C = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyantimalwarecheckingofactivexcontrols-9\">Don't run antimalware programs against ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#localmachinezonedonotrunantimalwareagainstactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – LocalMachineZoneDoNotRunAntimalwareAgainstActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9119a22184\">Script ActiveX controls marked safe for scripting\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>REG_DWORD\u003C\u002Fcode> value \u003Ccode>1405\u003C\u002Fcode> represents the \u003Ccode>URLACTION_SCRIPT_SAFE_ACTIVEX\u003C\u002Fcode> URL security action for the Restricted Sites zone. It determines whether scripts can interact with ActiveX controls whose publishers have marked them safe for scripting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1405 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptactivexmarkedsafe-7\">Script ActiveX controls marked safe for scripting\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonescriptactivexcontrolsmarkedsafeforscripting\">Microsoft Learn: InternetExplorer Policy CSP – Script ActiveX controls marked safe for scripting\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c9de967d7d\">Run ActiveX controls and plug-ins\u003C\u002Fh3>\n\u003Cp>These policy values determine whether ActiveX controls and plug-ins may run on pages assigned to the Internet Explorer \u003Cstrong>Restricted Sites\u003C\u002Fstrong> security zone (zone \u003Ccode>4\u003C\u002Fcode>). The value name \u003Ccode>1200\u003C\u002Fcode> identifies the corresponding URL security action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1200 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyrunactivexcontrols-7\">Run ActiveX controls and plug-ins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonerunactivexcontrolsandplugins\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneRunActiveXControlsAndPlugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f296666be8\">Allow scriptlets\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1209\u003C\u002Fcode> value controls the \u003Ccode>URLACTION_ACTIVEX_SCRIPTLET_RUN\u003C\u002Fcode> URL security action for the Internet zone. It determines whether Internet Explorer may run DHTML scriptlets. Scriptlets are a legacy, Internet Explorer-specific component technology for reusable scripted content; this setting does not control JavaScript or VBScript execution in general.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1209 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-allowscriptlets-1\">Allow scriptlets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowscriptlets\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowScriptlets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b4547813db\">Automatic prompting for file downloads\u003C\u002Fh3>\n\u003Cp>This setting controls how Internet Explorer, or the Internet Explorer engine, responds to file downloads that were not initiated by an explicit user action when the originating page belongs to the Restricted Sites zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2200 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policynotificationbardownloadurlaction-7\">Automatic prompting for file downloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowautomaticpromptingforfiledownloads\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowAutomaticPromptingForFileDownloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c7a40bab73\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls the Internet Explorer security feature \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> for the Internet Explorer processes identified by the administrative template. When the restriction is enabled, those processes block prompts to install ActiveX controls. This includes pages that instantiate an ActiveX control that is not installed or request installation of an updated control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_ACTIVEXINSTALL\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-11\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP — RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8c3db6949d\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls the Internet Explorer security feature \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> for the Internet Explorer processes identified by the administrative template. When the restriction is enabled, those processes block prompts to install ActiveX controls. This includes pages that instantiate an ActiveX control that is not installed or request installation of an updated control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_ACTIVEXINSTALL\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-11\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP — RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a942241237\">Logon options\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1A00\u003C\u002Fcode> value represents the \u003Ccode>URLACTION_CREDENTIALS_USE\u003C\u002Fcode> security setting for the Internet Zone, which has zone identifier \u003Ccode>3\u003C\u002Fcode>. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value that determines how Windows components use credentials for resources assigned to that zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1A00 = 65536 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policylogon-1\">Logon options\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonelogonoptions\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneLogonOptions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b776b87dfd\">Automatic prompting for file downloads\u003C\u002Fh3>\n\u003Cp>This policy controls how the Internet zone handles file downloads that were not initiated by an explicit user action, such as a mouse click or keystroke.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2200 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policynotificationbardownloadurlaction-1\">Automatic prompting for file downloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowautomaticpromptingforfiledownloads\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowAutomaticPromptingForFileDownloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1576f35c7a\">Allow META REFRESH\u003C\u002Fh3>\n\u003Cp>This policy controls whether pages in the Internet Explorer Restricted Sites zone may use an active Meta Refresh element to reload automatically or redirect the browser to another webpage.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1608 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowmetarefresh-7\">Allow META REFRESH\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowmetarefresh\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowMETAREFRESH\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-13ca073edb\">Prevent downloading of enclosures\u003C\u002Fh3>\n\u003Cp>This Administrative Templates policy prevents the Windows Feed Sync Engine from downloading enclosures from RSS feeds to the computer. An enclosure is a file referenced by an RSS \u003Ccode>enclosure\u003C\u002Fcode> element.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Feeds\\DisableEnclosureDownload = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-disable-downloading-of-enclosures\">Prevent downloading of enclosures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#disableenclosuredownloading\">Microsoft Learn: InternetExplorer Policy CSP – DisableEnclosureDownloading\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1f5d348825\">Allow binary and script behaviors\u003C\u002Fh3>\n\u003Cp>This value controls whether dynamic binary and script behaviors may run for content in the Restricted Sites security zone. These behaviors are components that attach functionality to HTML elements. The value name \u003Ccode>2000\u003C\u002Fcode> represents the \u003Ccode>URLACTION_BEHAVIOR_RUN\u003C\u002Fcode> URL security action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2000 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policybinarybehaviors-7\">Allow binary and script behaviors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowbinaryandscriptbehaviors\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowBinaryAndScriptBehaviors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b6b80f7caa\">Allow drag and drop or copy and paste files\u003C\u002Fh3>\n\u003Cp>This Internet Explorer policy controls whether users can drag files or copy and paste files from a source assigned to the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. Zone number \u003Ccode>4\u003C\u002Fcode> identifies that security zone, while value name \u003Ccode>1802\u003C\u002Fcode> represents file drag-and-drop and copy-and-paste operations.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1802 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydroporpastefiles-7\">Allow drag and drop or copy and paste files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowdraganddropcopyandpastefiles\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowDragAndDropCopyAndPasteFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-436d25d49d\">Allow drag and drop or copy and paste files\u003C\u002Fh3>\n\u003Cp>This policy controls the \u003Ccode>URLACTION_SHELL_MOVE_OR_COPY\u003C\u002Fcode> URL security action (\u003Ccode>0x00001802\u003C\u002Fcode>) for sources assigned to the Internet zone. It determines whether users may transfer files from such a source by dragging and dropping them or by copying and pasting them.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1802 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydroporpastefiles-1\">Allow drag and drop or copy and paste files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonallowdraganddropcopyandpastefiles\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowDragAndDropCopyAndPasteFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-31d5162d23\">Allow file downloads\u003C\u002Fh3>\n\u003Cp>This policy controls the file-download URL security action for the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong>. The final identifier, \u003Ccode>1803\u003C\u002Fcode>, is the name of a \u003Ccode>REG_DWORD\u003C\u002Fcode> value representing \u003Ccode>URLACTION_SHELL_FILE_DOWNLOAD\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1803 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyfiledownload-7\">Allow file downloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowfiledownloads\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowFileDownloads\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f47fb15dae\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls consistent MIME handling in Windows Explorer and Internet Explorer processes. Internet Explorer compares several indicators for the type of a file received from a web server: the file name extension, the HTTP \u003Ccode>Content-Type\u003C\u002Fcode> and \u003Ccode>Content-Disposition\u003C\u002Fcode> headers, and the type detected by examining the file signature.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-5\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#consistentmimehandlinginternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ConsistentMimeHandlingInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-51bb2f9fa6\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls consistent MIME handling in Windows Explorer and Internet Explorer processes. Internet Explorer compares several indicators for the type of a file received from a web server: the file name extension, the HTTP \u003Ccode>Content-Type\u003C\u002Fcode> and \u003Ccode>Content-Disposition\u003C\u002Fcode> headers, and the type detected by examining the file signature.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-5\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#consistentmimehandlinginternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ConsistentMimeHandlingInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9e41c90147\">Userdata persistence\u003C\u002Fh3>\n\u003Cp>This setting controls the \u003Ccode>URLACTION_HTML_USERDATA_SAVE\u003C\u002Fcode> URL action (\u003Ccode>0x00001606\u003C\u002Fcode>) for the Restricted Sites Zone (zone 4). It determines whether content in that zone may persist information in browser history, favorites, an XML store, or directly within a web page saved to disk. When a persisted page is opened again, its previously stored state can be restored.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1606 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyuserdatapersistence-7\">Userdata persistence\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowuserdatapersistence\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowUserDataPersistence\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8cf765c781\">Navigate windows and frames across different domains\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1607\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls the \u003Ccode>URLACTION_HTML_SUBFRAME_NAVIGATE\u003C\u002Fcode> URL action for the Restricted Sites zone (\u003Ccode>Zones\\4\u003C\u002Fcode>). It determines whether web content in that zone may open or navigate windows and frames across domain boundaries.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1607 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policynavigatesubframesacrossdomains-7\">Navigate windows and frames across different domains\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonenavigatewindowsandframes\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneNavigateWindowsAndFrames\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-04f78eaa45\">Access data sources across domains\u003C\u002Fh3>\n\u003Cp>This security-zone policy controls cross-domain data access through Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO) for content in the Internet Zone. The \u003Ccode>3\u003C\u002Fcode> in the registry path identifies the Internet Zone, while the value name \u003Ccode>1406\u003C\u002Fcode> represents the \u003Ccode>URLACTION_CROSS_DOMAIN_DATA\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1406 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyaccessdatasourcesacrossdomains-1\">Access data sources across domains\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowaccesstodatasources\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowAccessToDataSources\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d3595495e3\">Access data sources across domains\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1406\u003C\u002Fcode> value controls the \u003Ccode>URLACTION_CROSS_DOMAIN_DATA\u003C\u002Fcode> URL action for the Restricted Sites Zone. It determines whether a page running in this zone can use Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO) to access a data source on another domain.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1406 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyaccessdatasourcesacrossdomains-7\">Access data sources across domains\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowaccesstodatasources\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowAccessToDataSources\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dc283e079a\">Enable dragging of content from different domains across windows\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether the Internet Explorer security-zone model permits users to drag content between different domains when the source and destination are in separate windows. The \u003Ccode>Zones\\4\u003C\u002Fcode> key limits the setting to the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2709 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydragdropacrossdomainsacrosswindows-both-restricted\">Enable dragging of content from different domains across windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneenabledraggingofcontentfromdifferentdomainsacrosswindows\">Microsoft Learn: InternetExplorer Policy CSP – Enable dragging of content from different domains across windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dda6617a51\">Enable dragging of content from different domains within a window\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Internet Explorer policy controls whether users can drag content between different domains when the source and destination are in the same browser window. It applies only to sites in the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong>, represented by the \u003Ccode>Zones\\4\u003C\u002Fcode> subkey.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2708 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydragdropacrossdomainswithinwindow-both-restricted\">Enable dragging of content from different domains within a window\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneenabledraggingofcontentfromdifferentdomainswithinwindows\">Microsoft Learn: InternetExplorer Policy CSP – Enable dragging of content from different domains within a window\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f54505b61e\">Navigate windows and frames across different domains\u003C\u002Fh3>\n\u003Cp>This setting controls the \u003Ccode>URLACTION_HTML_SUBFRAME_NAVIGATE\u003C\u002Fcode> URL security action for the Internet zone. It determines whether windows and embedded frames may navigate to content in a different domain.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1607 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policynavigatesubframesacrossdomains-1\">Navigate windows and frames across different domains\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonenavigatewindowsandframes\">Microsoft Learn: InternetExplorer Policy CSP — InternetZoneNavigateWindowsAndFrames\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e411cc7a85\">Download signed ActiveX controls\u003C\u002Fh3>\n\u003Cp>This policy controls the downloading of signed ActiveX controls from webpages assigned to the Internet zone. Registry value \u003Ccode>1001\u003C\u002Fcode> is the \u003Ccode>URLACTION_DOWNLOAD_SIGNED_ACTIVEX\u003C\u002Fcode> URL action and uses the \u003Ccode>REG_DWORD\u003C\u002Fcode> data type.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1001 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydownloadsignedactivex-1\">Download signed ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonedownloadsignedactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP — InternetZoneDownloadSignedActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8c624afbb5\">Download unsigned ActiveX controls\u003C\u002Fh3>\n\u003Cp>This policy controls whether a page in the Internet zone may download an unsigned ActiveX control. Registry value \u003Ccode>1004\u003C\u002Fcode> represents the \u003Ccode>URLACTION_DOWNLOAD_UNSIGNED_ACTIVEX\u003C\u002Fcode> URL action, while zone number \u003Ccode>3\u003C\u002Fcode> identifies the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1004 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydownloadunsignedactivex-1\">Download unsigned ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonedownloadunsignedactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP — InternetZoneDownloadUnsignedActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-80ff83b85b\">Enable Application Bound Encryption\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables Application Bound Encryption in Microsoft Edge. Edge then binds the encryption keys used for local data storage to the browser whenever possible. This binding is intended to prevent other applications from readily retrieving and using those keys outside Edge.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\ApplicationBoundEncryptionEnabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-80ff83b85bde-applicationboundencryptionenabled\">Enable Application Bound Encryption\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fapplicationboundencryptionenabled\">Microsoft Learn: Enable Application Bound Encryption\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6bb6a0d13b\">Allow Basic authentication for HTTP\u003C\u002Fh3>\n\u003Cp>This value is a device-wide Microsoft Edge policy stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>. A value of \u003Ccode>0\u003C\u002Fcode> disables Basic authentication over nonsecure HTTP: Microsoft Edge blocks affected authentication requests and permits Basic authentication only over HTTPS.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\BasicAuthOverHttpEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-6bb6a0d13bf6-basicauthoverhttpenabled\">Allow Basic authentication for HTTP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002FBasicAuthOverHttpEnabled\">Microsoft Learn: BasicAuthOverHttpEnabled – Allow Basic authentication for HTTP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-01bf88e1df\">Show the Reload in Internet Explorer mode button in the toolbar\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether Microsoft Edge shows the Reload in Internet Explorer mode button on the toolbar by default.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\InternetExplorerModeToolbarButtonEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-01bf88e1df50-internetexplorermodetoolbarbuttonenabled\">Show the Reload in Internet Explorer mode button in the toolbar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Finternetexplorermodetoolbarbuttonenabled\">Microsoft Learn: InternetExplorerModeToolbarButtonEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-92915c5ae4\">Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context\u003C\u002Fh3>\n\u003Cp>This value controls whether websites in Microsoft Edge may use \u003Ccode>SharedArrayBuffer\u003C\u002Fcode> outside a cross-origin-isolated context. \u003Ccode>SharedArrayBuffer\u003C\u002Fcode> provides web applications with a binary memory region that can be accessed by multiple execution contexts.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\SharedArrayBufferUnrestrictedAccessAllowed = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-92915c5ae422-sharedarraybufferunrestrictedaccessallowed\">Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fsharedarraybufferunrestrictedaccessallowed\">Microsoft Learn: Microsoft Edge Browser Policy Documentation — SharedArrayBufferUnrestrictedAccessAllowed\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f4ecdef7af\">Enable site isolation for every site\u003C\u002Fh3>\n\u003Cp>This computer-level Microsoft Edge policy is represented by a \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enforces the browser's default site-isolation behavior, under which content from different sites runs in separate renderer processes. Users cannot opt out through experimental Edge settings.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\SitePerProcess = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f4ecdef7af6e-siteperprocess\">Enable site isolation for every site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fsiteperprocess\">Microsoft Learn: SitePerProcess – Enable site isolation for every site\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-51fbe69dff\">Configure Microsoft Defender SmartScreen\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SmartScreenEnabled\u003C\u002Fcode> value enables Microsoft Defender SmartScreen in Microsoft Edge. Its data type is \u003Ccode>REG_DWORD\u003C\u002Fcode>; a value of \u003Ccode>1\u003C\u002Fcode> turns the feature on and enforces the setting for the Edge installation on the computer. Users cannot then disable SmartScreen through the browser settings.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\SmartScreenEnabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-51fbe69dff36-smartscreenenabled\">Configure Microsoft Defender SmartScreen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fsmartscreenenabled\">Microsoft Learn: Microsoft Edge policy SmartScreenEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c78de33ab0\">Configure Microsoft Defender SmartScreen to block potentially unwanted apps\u003C\u002Fh3>\n\u003Cp>This registry value enables Microsoft Defender SmartScreen protection against potentially unwanted apps (PUAs) in Microsoft Edge. When the \u003Ccode>DWORD\u003C\u002Fcode> value is set to \u003Ccode>1\u003C\u002Fcode>, Edge warns about relevant downloads and blocks downloads and associated resource URLs that SmartScreen identifies as potentially unwanted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\SmartScreenPuaEnabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-c78de33ab01a-smartscreenpuaenabled\">Configure Microsoft Defender SmartScreen to block potentially unwanted apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fsmartscreenpuaenabled\">Microsoft Learn: Configure Microsoft Defender SmartScreen to block potentially unwanted apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-606c204474\">Configure Edge Website Typo Protection\u003C\u002Fh3>\n\u003Cp>\u003Ccode>TyposquattingCheckerEnabled\u003C\u002Fcode> controls Edge Website Typo Protection. When the mandatory machine-level registry value is set to \u003Ccode>1\u003C\u002Fcode> as a \u003Ccode>REG_DWORD\u003C\u002Fcode>, Microsoft Edge keeps the feature enabled and does not allow users to turn it off.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\TyposquattingCheckerEnabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-606c204474bd-typosquattingcheckerenabled\">Configure Edge Website Typo Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-browser-policies\u002Ftyposquattingcheckerenabled\">Microsoft Learn: Configure Edge Website Typo Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-772950cf0f\">Enable browser legacy extension point blocking\u003C\u002Fh3>\n\u003Cp>This value is a Boolean \u003Ccode>REG_DWORD\u003C\u002Fcode>. A value of \u003Ccode>1\u003C\u002Fcode> causes Microsoft Edge to apply the Windows \u003Ccode>ProcessExtensionPointDisablePolicy\u003C\u002Fcode> mitigation to its browser process. The mitigation blocks legacy Windows extension points through which third-party applications could load code into that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\BrowserLegacyExtensionPointsBlockingEnabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-772950cf0f22-browserlegacyextensionpointsblockingenabled\">Enable browser legacy extension point blocking\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fbrowserlegacyextensionpointsblockingenabled\">Microsoft Learn: BrowserLegacyExtensionPointsBlockingEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-90ba790bb0\">Dynamic Code Settings\u003C\u002Fh3>\n\u003Cp>A value of \u003Ccode>1\u003C\u002Fcode> (\u003Ccode>EnabledForBrowser\u003C\u002Fcode>) prevents the Microsoft Edge browser process from creating dynamic code. The registry value uses the \u003Ccode>REG_DWORD\u003C\u002Fcode> type.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\DynamicCodeSettings = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-90ba790bb0a3-dynamiccodesettings\">Dynamic Code Settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-browser-policies\u002Fdynamiccodesettings\">Microsoft Learn: DynamicCodeSettings – Dynamic Code Settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4c7b9f5a3c\">Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode\u003C\u002Fh3>\n\u003Cp>Setting this \u003Ccode>REG_DWORD\u003C\u002Fcode> value to \u003Ccode>0\u003C\u002Fcode> disables the automatic routing of MHT and MHTML files downloaded from the web to Internet Explorer mode. Microsoft Edge therefore does not automatically open these files with the IE mode engine.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\InternetExplorerIntegrationZoneIdentifierMhtFileAllowed = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-4c7b9f5a3c70-internetexplorerintegrationzoneidentifiermhtfileallowed\">Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Finternetexplorerintegrationzoneidentifiermhtfileallowed\">Microsoft Learn: Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2721c37b6d\">Allow unconfigured sites to be reloaded in Internet Explorer mode\u003C\u002Fh3>\n\u003Cp>This value is a Boolean Microsoft Edge policy represented as \u003Ccode>REG_DWORD\u003C\u002Fcode>. A value of \u003Ccode>0\u003C\u002Fcode> disables manual reloading of unconfigured sites in Internet Explorer mode.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\InternetExplorerIntegrationReloadInIEModeAllowed = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-2721c37b6dbf-internetexplorerintegrationreloadiniemodeallowed\">Allow unconfigured sites to be reloaded in Internet Explorer mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Finternetexplorerintegrationreloadiniemodeallowed\">Microsoft Learn: Allow unconfigured sites to be reloaded in Internet Explorer mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-79f24ab6d2\">Allow software WebGL fallback using SwiftShader\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>DWORD\u003C\u002Fcode> registry value controls whether Microsoft Edge may use SwiftShader as a software-based WebGL fallback when hardware GPU acceleration is unavailable.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Edge\\EnableUnsafeSwiftShader = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-79f24ab6d286-enableunsafeswiftshader\">Allow software WebGL fallback using SwiftShader\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdeployedge\u002Fmicrosoft-edge-policies\u002Fenableunsafeswiftshader\">Microsoft Learn: Allow software WebGL fallback using SwiftShader\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft Edge v139 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7274f94efd\">Turn on Enhanced Protected Mode\u003C\u002Fh3>\n\u003Cp>This policy controls Internet Explorer Enhanced Protected Mode. When enabled, it applies Enhanced Protected Mode to every security zone in which Protected Mode is already active. It does not independently enable Protected Mode for zones where that underlying protection is turned off.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\Isolation = PMEM (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-enableenhancedprotectedmode\">Turn on Enhanced Protected Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowenhancedprotectedmode\">Microsoft Learn: InternetExplorer Policy CSP – AllowEnhancedProtectedMode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-64a90c4203\">Allow scripting of Internet Explorer WebBrowser controls\u003C\u002Fh3>\n\u003Cp>This setting determines whether pages in the Internet zone can use script to control an embedded Internet Explorer WebBrowser control. The WebBrowser control is an ActiveX component through which applications can host web content using Internet Explorer and MSHTML technology.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1206 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-webbrowsercontrol-1\">Allow scripting of Internet Explorer WebBrowser controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowscriptingofinternetexplorerwebbrowsercontrols\">Microsoft Learn: Policy CSP – InternetExplorer: InternetZoneAllowScriptingOfInternetExplorerWebBrowserControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cdbddba818\">Turn on Protected Mode\u003C\u002Fh3>\n\u003Cp>This policy controls Protected Mode for websites in the Internet zone in Internet Explorer and for applicable content running in Microsoft Edge IE mode. Protected Mode runs web content at low integrity, limiting the file-system and registry locations to which the affected process can write.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2500 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-turnonprotectedmode-1\">Turn on Protected Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneenableprotectedmode\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneEnableProtectedMode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c131595caa\">Turn on Protected Mode\u003C\u002Fh3>\n\u003Cp>This policy controls Protected Mode for the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> security zone (zone 4). Protected Mode limits the registry and file-system locations to which content handled by Internet Explorer can write. These restrictions reduce the potential impact of an exploited browser or website vulnerability.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2500 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-turnonprotectedmode-7\">Turn on Protected Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneturnonprotectedmode\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneTurnOnProtectedMode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c104256cf3\">Allow script-initiated windows without size or position constraints\u003C\u002Fh3>\n\u003Cp>This Internet Explorer security-zone policy determines whether scripted-window security restrictions apply to sites in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. The value name \u003Ccode>2102\u003C\u002Fcode> represents the \u003Ccode>URLACTION_FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2102 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policywindowsrestrictionsurlaction-7\">Allow script-initiated windows without size or position constraints\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowscriptinitiatedwindows\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowScriptInitiatedWindows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ff461a5661\">Allow script-initiated windows without size or position constraints\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>REG_DWORD\u003C\u002Fcode> value \u003Ccode>2102\u003C\u002Fcode> controls the \u003Ccode>URLACTION_FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> URL action for the Internet zone, identified by zone key \u003Ccode>3\u003C\u002Fcode>. It determines whether scripts may open and manipulate windows without the additional size, position, and presentation restrictions imposed by Internet Explorer.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2102 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policywindowsrestrictionsurlaction-1\">Allow script-initiated windows without size or position constraints\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonesallowscriptinitiatedwindows\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowScriptInitiatedWindows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bb83b71c78\">Download signed ActiveX controls\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1001\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether a signed ActiveX control may be downloaded from a page assigned to the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong>. Windows evaluates the zone of the HTML page containing the control, rather than assigning the decision solely from the control’s download location.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1001 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydownloadsignedactivex-7\">Download signed ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonedownloadsignedactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneDownloadSignedActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-836c48a879\">Download unsigned ActiveX controls\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1004\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls the downloading of unsigned ActiveX controls for websites in the Restricted Sites zone (\u003Ccode>Zones\\4\u003C\u002Fcode>). It represents the \u003Ccode>URLACTION_DOWNLOAD_UNSIGNED_ACTIVEX\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1004 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydownloadunsignedactivex-7\">Download unsigned ActiveX controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonedownloadunsignedactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneDownloadUnsignedActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-07c37d1cd5\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the MIME Sniffing Safety Feature for the specified Explorer and Internet Explorer processes. MIME sniffing examines a file’s binary signature to determine its actual content type, which Internet Explorer can then use when deciding how to render or otherwise handle the file.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-6\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#mimesniffingsafetyfeatureinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – MimeSniffingSafetyFeatureInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-194c9a8eb0\">Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows\u003C\u002Fh3>\n\u003Cp>This policy determines whether Internet Explorer 11 uses 64-bit or 32-bit tab processes while running in Enhanced Protected Mode on 64-bit versions of Windows.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\Isolation64Bit = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-enableenhancedprotectedmode64bit\">Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-it-pro\u002Finternet-explorer-11\u002Fie11-deploy-guide\u002Fnew-group-policy-settings-for-ie11\">Microsoft Learn: New group policy settings for Internet Explorer 11\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ef2abef672\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls whether Internet Explorer processes display the Notification bar when an Internet Explorer security feature restricts a file or code installation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SECURITYBAND\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-10\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#notificationbarinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – NotificationBarInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ad79bb5f0d\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This policy controls whether Internet Explorer processes display the Notification bar when an Internet Explorer security feature restricts a file or code installation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SECURITYBAND\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-10\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#notificationbarinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – NotificationBarInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e78fda3670\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the MIME Sniffing Safety Feature for the specified Explorer and Internet Explorer processes. MIME sniffing examines a file’s binary signature to determine its actual content type, which Internet Explorer can then use when deciding how to render or otherwise handle the file.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-6\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#mimesniffingsafetyfeatureinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – MimeSniffingSafetyFeatureInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-08004d226d\">Java permissions\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Internet Explorer policy sets the permission level for Java applets in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. The \u003Ccode>1C00\u003C\u002Fcode> DWORD value represents the \u003Ccode>URLACTION_JAVA_PERMISSIONS\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-7\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – Restricted Sites Zone Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-92e29128e1\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines the permission level for Java applets in the Locked-Down Trusted Sites Zone. It represents the \u003Ccode>URLACTION_JAVA_PERMISSIONS\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\2\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-6\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddowntrustedsiteszonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – Locked-Down Trusted Sites Zone Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-abf18e3af6\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> DWORD value determines the permission level for Java applets in the Internet zone. It represents the \u003Ccode>URLACTION_JAVA_PERMISSIONS\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-1\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonjavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-022528640c\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> registry value selects the permission level for Java applets in the Local Intranet zone. It represents the \u003Ccode>URLACTION_JAVA_PERMISSIONS\u003C\u002Fcode> URL action and applies only to content classified by Windows as belonging to that zone (\u003Ccode>Zones\\1\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1\\1C00 = 65536 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-3\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#intranetzonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – IntranetZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b0842f0291\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> registry value determines the permission level for Java applets in the Locked-Down Local Machine Zone. This zone is the restricted counterpart of the regular Local Machine Zone. Internet Explorer lockdown features compare the settings of the active security zone with those of its locked-down equivalent.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\0\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-10\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddownlocalmachinezonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – LockedDownLocalMachineZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b08b79a436\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines the permissions granted to Java applets in the Locked-Down Restricted Sites Zone. Its data corresponds to the Java URL policy values:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\4\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-8\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddownrestrictedsiteszonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – LockedDownRestrictedSitesZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d0f618232a\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> DWORD value selects the Java permission level for Java applets in the Locked-Down Intranet Zone of Internet Explorer or in compatible components that evaluate Internet Explorer security zones.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\1\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-4\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddownintranetjavapermissions\">Microsoft Learn: InternetExplorer Policy CSP – LockedDownIntranetJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5d6cbf9870\">Java permissions\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1C00\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value defines the permission level for Java applets in the Local Machine security zone. The \u003Ccode>Zones\\0\u003C\u002Fcode> key applies only to content that Windows maps to the Local Machine zone; it does not apply to the Local Intranet, Trusted Sites, Internet, or Restricted Sites zones.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0\\1C00 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-9\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#localmachinezonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP — LocalMachineZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9c1e01278b\">Java permissions\u003C\u002Fh3>\n\u003Cp>This policy setting controls the permission level for Java applets in the \u003Cstrong>Trusted Sites Zone\u003C\u002Fstrong>. Zone number \u003Ccode>2\u003C\u002Fcode> identifies that zone, and the \u003Ccode>1C00\u003C\u002Fcode> DWORD value represents the \u003Ccode>URLACTION_JAVA_PERMISSIONS\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2\\1C00 = 65536 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyjavapermissions-5\">Java permissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#trustedsiteszonejavapermissions\">Microsoft Learn: InternetExplorer Policy CSP — TrustedSitesZoneJavaPermissions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8523321a78\">Allow loading of XAML files\u003C\u002Fh3>\n\u003Cp>This registry value controls whether Internet Explorer loads XAML files from websites in the Internet zone. XAML is an XML-based markup language used, among other purposes, to define Windows Presentation Foundation user interfaces and graphics.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2402 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-xaml-1\">Allow loading of XAML files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowloadingofxamlfiles\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowLoadingOfXAMLFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bd499624cf\">Allow loading of XAML files\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>2402\u003C\u002Fcode> value controls whether Internet Explorer loads standalone XAML files for websites in the Restricted Sites zone. XAML is an XML-based declarative language used by Windows Presentation Foundation to describe user interfaces and graphics.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2402 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-xaml-7\">Allow loading of XAML files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowloadingofxamlfiles\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowLoadingOfXAMLFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a698bd8e31\">Include local path when user is uploading files to a server\u003C\u002Fh3>\n\u003Cp>This setting controls whether the local path of a selected file is sent to the server when the user uploads the file through an HTML form. It represents the Internet Explorer URL action \u003Ccode>URLACTION_HTML_INCLUDE_FILE_PATH\u003C\u002Fcode> for the Internet zone (\u003Ccode>Zone 3\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\160A = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-localpathforupload-1\">Include local path when user is uploading files to a server\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneincludelocalpathwhenuploadingfilestoserver\">Microsoft Learn: InternetExplorer Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c8a19f9cce\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>These registry entries belong to the ADMX-backed Internet Explorer Processes policy under MK Protocol Security Restriction. When the restriction is enabled, Windows prevents File Explorer and Internet Explorer from using the MK protocol. Resources addressed through that protocol consequently fail to load in those processes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-3\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#mkprotocolsecurityrestrictioninternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – MKProtocolSecurityRestrictionInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-769da43523\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>These registry entries belong to the ADMX-backed Internet Explorer Processes policy under MK Protocol Security Restriction. When the restriction is enabled, Windows prevents File Explorer and Internet Explorer from using the MK protocol. Resources addressed through that protocol consequently fail to load in those processes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-3\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#mkprotocolsecurityrestrictioninternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – MKProtocolSecurityRestrictionInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-14a77b22df\">Allow updates to status bar via script\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>2103\u003C\u002Fcode> registry value controls whether scripts from sites in the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong> may change the text displayed in the Internet Explorer status bar. It represents the \u003Ccode>URLACTION_FEATURE_SCRIPT_STATUS_BAR\u003C\u002Fcode> URL action (\u003Ccode>0x00002103\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2103 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-scriptstatusbar-7\">Allow updates to status bar via script\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowupdatestostatusbarviascript\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowUpdatesToStatusBarViaScript\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3471d040a3\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fh3>\n\u003Cp>This policy controls whether ActiveX controls in the Local intranet zone can be initialized, loaded with parameters, and accessed by scripts when they are not marked as safe for untrusted data or scripting. The \u003Ccode>1201\u003C\u002Fcode> value represents the URL security action that governs overriding ActiveX object safety.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1\\1201 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptactivexnotmarkedsafe-3\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#intranetzoneinitializeandscriptactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – IntranetZoneInitializeAndScriptActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-96f9eabdde\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fh3>\n\u003Cp>This security-zone policy controls whether ActiveX controls not marked as safe can be initialized, loaded with parameters, and accessed by scripts on pages in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. The \u003Ccode>1201\u003C\u002Fcode> value is a \u003Ccode>REG_DWORD\u003C\u002Fcode> representing this specific zone action:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1201 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptactivexnotmarkedsafe-7\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneinitializeandscriptactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneInitializeAndScriptActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1e642da279\">Security Zones: Use only machine settings\u003C\u002Fh3>\n\u003Cp>\u003Ccode>Security_HKLM_only\u003C\u002Fcode> is a machine-wide \u003Ccode>REG_DWORD\u003C\u002Fcode> value. When its value is \u003Ccode>1\u003C\u002Fcode>, Windows obtains security-zone information exclusively from the machine settings under \u003Ccode>HKEY_LOCAL_MACHINE\u003C\u002Fcode>. Per-user zone settings stored under \u003Ccode>HKEY_CURRENT_USER\u003C\u002Fcode> are not used when the effective configuration is evaluated.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Security_HKLM_only = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-security-hklm-only\">Security Zones: Use only machine settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#securityzonesuseonlymachinesettings\">Microsoft Learn: InternetExplorer Policy CSP – SecurityZonesUseOnlyMachineSettings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e29681e165\">Turn on SmartScreen Filter scan\u003C\u002Fh3>\n\u003Cp>This policy controls whether SmartScreen Filter scans webpages assigned to the Internet zone for malicious content. The \u003Ccode>Zones\\3\u003C\u002Fcode> subkey identifies the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2301 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-phishing-1\">Turn on SmartScreen Filter scan\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowsmartscreenie\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowSmartScreenIE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9d2f6aff98\">Use Pop-up Blocker\u003C\u002Fh3>\n\u003Cp>This policy controls Internet Explorer's Pop-up Blocker for websites in the Internet zone. Registry value \u003Ccode>1809\u003C\u002Fcode> is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1809 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyblockpopupwindows-1\">Use Pop-up Blocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneusepopupblocker\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneUsePopupBlocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-30f102da74\">Use Pop-up Blocker\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1809\u003C\u002Fcode> registry value controls Pop-up Blocker for websites in the Restricted Sites security zone (zone \u003Ccode>4\u003C\u002Fcode>). It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value: \u003Ccode>0\u003C\u002Fcode> turns on Pop-up Blocker, while \u003Ccode>3\u003C\u002Fcode> turns it off.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1809 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyblockpopupwindows-7\">Use Pop-up Blocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetexplorer-restrictedsiteszoneusepopupblocker\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneUsePopupBlocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e6ab1788b2\">Do not apply the Mark of the Web tag to files copied from insecure sources\u003C\u002Fh3>\n\u003Cp>This computer policy controls whether File Explorer tags files copied from locations that Windows classifies as insecure. The Mark of the Web (MotW) records security-zone information indicating that a file originated from an untrusted source.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Explorer\\DisableMotWOnInsecurePathCopy = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowsexplorer-disablemotwoninsecurepathcopy\">Do not apply the Mark of the Web tag to files copied from insecure sources\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-windowsexplorer#disablemotwoninsecurepathcopy\">Microsoft Learn: ADMX_WindowsExplorer Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-51238947aa\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature for File Explorer and Internet Explorer processes. The feature constrains windows that scripts open, resize, or reposition programmatically.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-8\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ScriptedWindowSecurityRestrictionsInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-43f862be9c\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature for File Explorer and Internet Explorer processes. The feature constrains windows that scripts open, resize, or reposition programmatically.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-8\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ScriptedWindowSecurityRestrictionsInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f345e11e79\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature for File Explorer and Internet Explorer processes. The feature constrains windows that scripts open, resize, or reposition programmatically.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS\\(Reserved) = 1 (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-8\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ScriptedWindowSecurityRestrictionsInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-25eda6ef7b\">Launching applications and files in an IFRAME\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1804\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether applications may be launched and files downloaded when a page assigned to the Restricted Sites zone (zone 4) initiates the operation through an IFRAME reference in its HTML.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1804 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policylaunchappsandfilesiniframe-7\">Launching applications and files in an IFRAME\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonelaunchingapplicationsandfilesiniframe\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneLaunchingApplicationsAndFilesInIFRAME\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ccc39209ef\">Launching applications and files in an IFRAME\u003C\u002Fh3>\n\u003Cp>This policy setting controls whether applications may be launched and files may be downloaded when referenced by an HTML \u003Ccode>IFRAME\u003C\u002Fcode> on a page in the Internet zone. Zone identifier \u003Ccode>3\u003C\u002Fcode> represents the Internet zone, while value name \u003Ccode>1804\u003C\u002Fcode> corresponds to the \u003Ccode>URLACTION_SHELL_VERB\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1804 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policylaunchappsandfilesiniframe-1\">Launching applications and files in an IFRAME\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonelaunchingapplicationsandfilesiniframe\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneLaunchingApplicationsAndFilesInIFRAME\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9b602d606e\">Turn off the Security Settings Check feature\u003C\u002Fh3>\n\u003Cp>This ADMX-backed policy setting disables the Internet Explorer feature that evaluates the browser’s security settings to determine whether they expose Internet Explorer to risk.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Security\\DisableSecuritySettingsCheck = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-disable-security-settings-check\">Turn off the Security Settings Check feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#disablesecuritysettingscheck\">Microsoft Learn: InternetExplorer Policy CSP — DisableSecuritySettingsCheck\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-814567a912\">Allow fallback to SSL 3.0 (Internet Explorer)\u003C\u002Fh3>\n\u003Cp>This machine-wide registry value controls whether Internet Explorer may retry a connection with SSL 3.0 or an older enabled protocol after an attempt using TLS 1.0 or later fails.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\EnableSSL3Fallback = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-enablessl3fallback\">Allow fallback to SSL 3.0 (Internet Explorer)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowfallbacktossl3\">Microsoft Learn: InternetExplorer Policy CSP – AllowFallbackToSSL3\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b547c3183e\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed policy controls protection from zone elevation for Internet Explorer components running in \u003Ccode>explorer.exe\u003C\u002Fcode> and \u003Ccode>iexplore.exe\u003C\u002Fcode>. Internet Explorer assigns content to security zones such as the Internet, Local intranet, and Local Machine zones. Each zone imposes a different set of security restrictions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-9\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#protectionfromzoneelevationinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ProtectionFromZoneElevationInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eb29676b5d\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed policy controls protection from zone elevation for Internet Explorer components running in \u003Ccode>explorer.exe\u003C\u002Fcode> and \u003Ccode>iexplore.exe\u003C\u002Fcode>. Internet Explorer assigns content to security zones such as the Internet, Local intranet, and Local Machine zones. Each zone imposes a different set of security restrictions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-9\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#protectionfromzoneelevationinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – ProtectionFromZoneElevationInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b5b1ad4130\">Process List\u003C\u002Fh3>\n\u003Cp>This Group Policy setting determines, for individual executable files, whether the Internet Explorer Protection From Zone Elevation feature applies. The feature prevents navigation that was not initiated by the user from a page in one security zone to a more privileged, less restricted zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION\\(Reserved) = 1 (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyprocesslist-9\">Process List\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169%28v%3Dvs.85%29\">Microsoft Learn: INTERNETFEATURELIST enumeration — FEATURE_ZONE_ELEVATION\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cf090710d1\">Allow scriptlets\u003C\u002Fh3>\n\u003Cp>This ADMX-backed policy controls whether scriptlets may run in the Internet Explorer Restricted Sites security zone. Zone number \u003Ccode>4\u003C\u002Fcode> refers specifically to that zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1209 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-allowscriptlets-7\">Allow scriptlets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowscriptlets\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowScriptlets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-258deeac2e\">Check for signatures on downloaded programs\u003C\u002Fh3>\n\u003Cp>This Internet Explorer policy controls whether digital signatures on executable programs are checked before download. A valid digital signature can identify the software publisher and indicate whether the signed file has been altered after signing.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Download\\CheckExeSignatures = yes (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-downloadsignatures\">Check for signatures on downloaded programs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#checksignaturesondownloadedprograms\">Microsoft Learn: InternetExplorer Policy CSP – CheckSignaturesOnDownloadedPrograms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-fb64af3993\">Run .NET Framework-reliant components signed with Authenticode\u003C\u002Fh3>\n\u003Cp>This registry value controls the \u003Ccode>URLACTION_MANAGED_SIGNED\u003C\u002Fcode> URL action for the Internet Explorer Internet zone. It determines whether Authenticode-signed managed .NET Framework components may run. The affected components include managed controls referenced by an \u003Ccode>object\u003C\u002Fcode> element and managed executables referenced by a link.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2001 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policysignedframeworkcomponentsurlaction-1\">Run .NET Framework-reliant components signed with Authenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonerunnetframeworkreliantcomponentssignedwithauthenticode\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneRunNETFrameworkReliantComponentsSignedWithAuthenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-fb6c162f67\">Run .NET Framework-reliant components signed with Authenticode\u003C\u002Fh3>\n\u003Cp>This registry value controls whether Internet Explorer may execute Authenticode-signed, managed .NET Framework components originating from websites in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. These components include managed controls referenced by an HTML object tag and managed executables referenced by a link.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2001 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policysignedframeworkcomponentsurlaction-7\">Run .NET Framework-reliant components signed with Authenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonerunnetframeworkreliantcomponentssignedwithauthenticode\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneRunNETFrameworkReliantComponentsSignedWithAuthenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-18a671721c\">Allow scripting of Internet Explorer WebBrowser controls\u003C\u002Fh3>\n\u003Cp>This policy determines whether pages in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone may control embedded Internet Explorer WebBrowser controls through script.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1206 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-webbrowsercontrol-7\">Allow scripting of Internet Explorer WebBrowser controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowscriptingofinternetexplorerwebbrowsercontrols\">Microsoft Learn: InternetExplorer Policy CSP – Restricted Sites Zone: Allow scripting of Internet Explorer WebBrowser controls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-de1fd8bc3e\">Allow active scripting\u003C\u002Fh3>\n\u003Cp>This policy setting determines whether script code may run on pages assigned to the Internet Explorer \u003Cstrong>Restricted Sites\u003C\u002Fstrong> security zone. The \u003Ccode>1400\u003C\u002Fcode> value represents the \u003Ccode>URLACTION_SCRIPT_RUN\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1400 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyactivescripting-7\">Allow active scripting\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowactivescripting\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowActiveScripting\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-064de84f48\">Scripting of Java applets\u003C\u002Fh3>\n\u003Cp>This setting controls whether scripts on pages in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone can access the properties, methods, and events that Java applets expose to scripting. It governs interaction between scripts and applets; it does not determine whether Java applets are allowed to run.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1402 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptingofjavaapplets-7\">Scripting of Java applets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonescriptingofjavaapplets\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneScriptingOfJavaApplets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-61a27719da\">Prevent managing SmartScreen Filter\u003C\u002Fh3>\n\u003Cp>\u003Ccode>EnabledV9\u003C\u002Fcode> is a \u003Ccode>REG_DWORD\u003C\u002Fcode> policy value for Internet Explorer's SmartScreen Filter. It enforces the filter mode and prevents users from changing that mode in Internet Explorer.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\PhishingFilter\\EnabledV9 = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-disable-managing-safety-filter-ie9\">Prevent managing SmartScreen Filter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#preventmanagingsmartscreenfilter\">Microsoft Learn: InternetExplorer Policy CSP – PreventManagingSmartScreenFilter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cba09ded40\">Turn on SmartScreen Filter scan\u003C\u002Fh3>\n\u003Cp>This policy controls whether SmartScreen Filter scans webpages in the Locked-Down Restricted Sites Zone for malicious content. Registry value \u003Ccode>2301\u003C\u002Fcode> represents the Internet Explorer URL action \u003Ccode>URLACTION_ALLOW_APEVALUATION\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\4\\2301 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-phishing-8\">Turn on SmartScreen Filter scan\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddownrestrictedsiteszoneallowsmartscreenie\">Microsoft Learn: InternetExplorer Policy CSP – LockedDownRestrictedSitesZoneAllowSmartScreenIE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-753df14c21\">Turn on SmartScreen Filter scan\u003C\u002Fh3>\n\u003Cp>This setting controls whether SmartScreen Filter scans webpages in the Locked-Down Internet Zone for malicious content. It is part of the Internet Explorer security-zone model.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\3\\2301 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-phishing-2\">Turn on SmartScreen Filter scan\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#lockeddowninternetzoneallowsmartscreenie\">Microsoft Learn: InternetExplorer Policy CSP – LockedDownInternetZoneAllowSmartScreenIE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-470ec0ca09\">Turn on SmartScreen Filter scan\u003C\u002Fh3>\n\u003Cp>This Internet Explorer policy controls whether SmartScreen Filter scans webpages assigned to the Restricted Sites zone. The zone is identified by key number \u003Ccode>4\u003C\u002Fcode>, while value \u003Ccode>2301\u003C\u002Fcode> holds its zone-specific SmartScreen setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2301 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-phishing-7\">Turn on SmartScreen Filter scan\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowsmartscreenie\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowSmartScreenIE\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c89a9db951\">Allow software to run or install even if the signature is invalid\u003C\u002Fh3>\n\u003Cp>This Internet Explorer policy controls whether users can install or run software whose digital signature is invalid. Its scope includes software such as ActiveX controls and files downloaded through Internet Explorer.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Download\\RunInvalidSignatures = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-invalidsignatureblock\">Allow software to run or install even if the signature is invalid\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowsoftwarewhensignatureisinvalid\">Microsoft Learn: InternetExplorer Policy CSP – AllowSoftwareWhenSignatureIsInvalid\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4ebf70b114\">Show security warning for potentially unsafe files\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1806\u003C\u002Fcode> DWORD value governs the \u003Ccode>URLACTION_SHELL_EXECUTE_HIGHRISK\u003C\u002Fcode> URL security action for the Restricted Sites zone. It determines whether Windows may open executable files and other files classified as potentially unsafe without interruption, must display the “Open File – Security Warning” prompt first, or must block the operation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1806 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-unsafefiles-7\">Show security warning for potentially unsafe files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneshowsecuritywarningforpotentiallyunsafefiles\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneShowSecurityWarningForPotentiallyUnsafeFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7e78de2596\">Disable Internet Explorer 11 Launch Via COM Automation\u003C\u002Fh3>\n\u003Cp>A DWORD value of \u003Ccode>1\u003C\u002Fcode> prevents Internet Explorer 11 from being launched through COM automation. Applications and scripts can no longer create a new Internet Explorer instance through its automation interfaces.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\DisableInternetExplorerLaunchViaCOM = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-7e78de2596ba-disableinternetexplorerlaunchviacom\">Disable Internet Explorer 11 Launch Via COM Automation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#disableinternetexplorerlaunchviacom\">Microsoft Learn: InternetExplorer Policy CSP – DisableInternetExplorerLaunchViaCOM\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c7d364dda7\">Allow updates to status bar via script\u003C\u002Fh3>\n\u003Cp>This registry value determines whether scripts on pages in the Internet zone may change the text displayed in the Internet Explorer status bar. The value name \u003Ccode>2103\u003C\u002Fcode> identifies the \u003Ccode>URLACTION_FEATURE_SCRIPT_STATUS_BAR\u003C\u002Fcode> URL action, whose numeric identifier is \u003Ccode>0x00002103\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2103 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-scriptstatusbar-1\">Allow updates to status bar via script\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowupdatestostatusbarviascript\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowUpdatesToStatusBarViaScript\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eb68d51c18\">Allow only approved domains to use ActiveX controls without prompt\u003C\u002Fh3>\n\u003Cp>This ADMX-backed policy controls per-domain approval for installed ActiveX controls in the Internet zone. It applies when a website attempts to use an ActiveX control that was installed by a different website.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\120b = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyonlyallowapproveddomainstouseactivexwithoutprompt-both-internet\">Allow only approved domains to use ActiveX controls without prompt\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowonlyapproveddomainstouseactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowOnlyApprovedDomainsToUseActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-73925397aa\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature for Windows Explorer and Internet Explorer processes. The feature applies to file downloads that were not explicitly initiated by a user action such as a mouse click or key press.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_FILEDOWNLOAD\\explorer.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-12\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictFileDownloadInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d5774bc640\">Internet Explorer Processes\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature for Windows Explorer and Internet Explorer processes. The feature applies to file downloads that were not explicitly initiated by a user action such as a mouse click or key press.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_FILEDOWNLOAD\\iexplore.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iesf-policyexplorerprocesses-12\">Internet Explorer Processes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictFileDownloadInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eb83a29bd7\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fh3>\n\u003Cp>Registry value \u003Ccode>1201\u003C\u002Fcode> determines whether content in the Internet zone may initialize and script ActiveX controls whose developers have not marked them as safe for initialization with untrusted data or safe for scripting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1201 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptactivexnotmarkedsafe-1\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneinitializeandscriptactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneInitializeAndScriptActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7f15eb5f0a\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Group Policy setting controls whether ActiveX controls in the Trusted Sites zone may be initialized, loaded with parameters, and accessed by scripts when they are not marked as safe for untrusted data or scripting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2\\1201 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyscriptactivexnotmarkedsafe-5\">Initialize and script ActiveX controls not marked as safe\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#trustedsiteszoneinitializeandscriptactivexcontrols\">Microsoft Learn: InternetExplorer Policy CSP – TrustedSitesZoneInitializeAndScriptActiveXControls\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0253f76be0\">Run .NET Framework-reliant components not signed with Authenticode\u003C\u002Fh3>\n\u003Cp>This zone-specific registry value represents the \u003Ccode>URLACTION_MANAGED_UNSIGNED\u003C\u002Fcode> (\u003Ccode>0x00002004\u003C\u002Fcode>) URL security action for the Internet zone (\u003Ccode>Zones\\3\u003C\u002Fcode>). It determines whether Internet Explorer may execute managed, .NET Framework-reliant components that are not signed with Authenticode. These components include managed controls referenced by an \u003Ccode>object\u003C\u002Fcode> element and managed executables referenced by a link.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2004 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyunsignedframeworkcomponentsurlaction-1\">Run .NET Framework-reliant components not signed with Authenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallownetframeworkreliantcomponents\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowNETFrameworkReliantComponents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a36b4d948c\">Run .NET Framework-reliant components not signed with Authenticode\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>2004\u003C\u002Fcode> registry value controls the \u003Ccode>URLACTION_MANAGED_UNSIGNED\u003C\u002Fcode> (\u003Ccode>0x00002004\u003C\u002Fcode>) URL security action for Internet Explorer's Restricted Sites zone. It determines whether unsigned managed components that depend on the .NET Framework may run. The affected content includes managed controls referenced by an \u003Ccode>object\u003C\u002Fcode> element and managed executables referenced by a link.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2004 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyunsignedframeworkcomponentsurlaction-7\">Run .NET Framework-reliant components not signed with Authenticode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallownetframeworkreliantcomponents\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowNETFrameworkReliantComponents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-94b6394177\">Allow VBScript to run in Internet Explorer\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>140C\u003C\u002Fcode> registry value controls whether pages in the Internet zone may execute VBScript within Internet Explorer or its underlying MSHTML engine. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value using the standard Internet Explorer URL-action policy values:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\140C = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowvbscript-1\">Allow VBScript to run in Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzallowvbscripttorunininternetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowVBScriptToRunInInternetExplorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-72780325ae\">Allow VBScript to run in Internet Explorer\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>140C\u003C\u002Fcode> value controls whether Internet Explorer may run VBScript on pages in the \u003Cstrong>Restricted Sites Zone\u003C\u002Fstrong>. The value under \u003Ccode>HKLM\u003C\u002Fcode> represents the device policy, while the value under \u003Ccode>HKCU\u003C\u002Fcode> represents the user policy.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\140C = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowvbscript-7\">Allow VBScript to run in Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowvbscripttorunininternetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowVBScriptToRunInInternetExplorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-53ce77152c\">Allow only approved domains to use the TDC ActiveX control\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>120c\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether websites in the Internet zone may run the Tabular Data Control (TDC). This legacy ActiveX control enables HTML pages to load, display, and filter data from delimited text files.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\120c = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowtdccontrol-both-internet\">Allow only approved domains to use the TDC ActiveX control\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonenallowonlyapproveddomainstousetdcactivexcontrol\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowOnlyApprovedDomainsToUseTDCActiveXControl\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5ae307f2a6\">Show security warning for potentially unsafe files\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1806\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls the URL security action for opening executable files and other files classified as potentially unsafe when they originate from the Internet zone. Zone number \u003Ccode>3\u003C\u002Fcode> represents the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1806 = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policy-unsafefiles-1\">Show security warning for potentially unsafe files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneshowsecuritywarningforpotentiallyunsafefiles\">Microsoft Learn: Policy CSP – InternetExplorer – InternetZoneShowSecurityWarningForPotentiallyUnsafeFiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-75eb586263\">Turn on certificate address mismatch warning\u003C\u002Fh3>\n\u003Cp>This Internet Explorer policy enforces a security warning when an HTTPS website presents a certificate whose identity does not match the website address being visited. This includes cases in which the requested host name is not covered by the certificate name or a subject alternative name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\WarnOnBadCertRecving = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policywarncertmismatch\">Turn on certificate address mismatch warning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowcertificateaddressmismatchwarning\">Microsoft Learn: InternetExplorer Policy CSP – AllowCertificateAddressMismatchWarning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d8ad7f1892\">Turn on Cross-Site Scripting Filter\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer engine's Cross-Site Scripting (XSS) Filter for websites in the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. The \u003Ccode>4\u003C\u002Fcode> in the registry path identifies that security zone, while the value name \u003Ccode>1409\u003C\u002Fcode> represents the \u003Ccode>URLACTION_SCRIPT_XSSFILTER\u003C\u002Fcode> URL action (\u003Ccode>0x00001409\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1409 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyturnonxssfilter-both-restricted\">Turn on Cross-Site Scripting Filter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneenablecrosssitescriptingfilter\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneEnableCrossSiteScriptingFilter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a92baaa446\">Turn on Cross-Site Scripting Filter\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1409\u003C\u002Fcode> registry value controls the Internet Explorer Cross-Site Scripting (XSS) Filter for websites in the Internet Zone. The filter examines cross-site script injections and attempts to block content that it identifies as an XSS attack.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1409 = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyturnonxssfilter-both-internet\">Turn on Cross-Site Scripting Filter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneenablecrosssitescriptingfilter\">Microsoft Learn: InternetZoneEnableCrossSiteScriptingFilter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6898ce4710\">Check for server certificate revocation\u003C\u002Fh3>\n\u003Cp>This policy controls whether Internet Explorer checks the revocation status of server certificates. A certification authority can revoke a certificate when, for example, its private key has been compromised or the certificate should no longer be accepted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\CertificateRevocation = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-certificaterevocation\">Check for server certificate revocation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#checkservercertificaterevocation\">Microsoft Learn: InternetExplorer Policy CSP – CheckServerCertificateRevocation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-aeea6c4cef\">Enable dragging of content from different domains within a window\u003C\u002Fh3>\n\u003Cp>This value controls whether Internet Explorer permits users to drag content from one domain to another when the source and destination are in the same browser window. It applies specifically to content evaluated in the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2708 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydragdropacrossdomainswithinwindow-both-internet\">Enable dragging of content from different domains within a window\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonenabledraggingofcontentfromdifferentdomainswithinwindows\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneEnableDraggingOfContentFromDifferentDomainsWithinWindows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-36779e7535\">Enable dragging of content from different domains across windows\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>2709\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether content can be dragged between different domains when the source and destination are in separate windows. It applies to the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2709 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policydragdropacrossdomainsacrosswindows-both-internet\">Enable dragging of content from different domains across windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneenabledraggingofcontentfromdifferentdomainsacrosswindows\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneEnableDraggingOfContentFromDifferentDomainsAcrossWindows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-644cccf4d4\">Web sites in less privileged Web content zones can navigate into this zone\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>2101\u003C\u002Fcode> value controls the \u003Ccode>URLACTION_FEATURE_ZONE_ELEVATION\u003C\u002Fcode> URL action for the Internet zone, represented by zone key \u003Ccode>3\u003C\u002Fcode>. It determines whether a site in a less privileged zone, such as the Restricted Sites zone, may open a new window in or initiate navigation into the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\2101 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyzoneelevationurlaction-1\">Web sites in less privileged Web content zones can navigate into this zone\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzonelessprivilegedsites\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowLessPrivilegedSites\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c2e2b174c7\">Web sites in less privileged Web content zones can navigate into this zone\u003C\u002Fh3>\n\u003Cp>This ADMX-backed Internet Explorer policy controls protection from zone elevation for navigations into the \u003Cstrong>Restricted Sites\u003C\u002Fstrong> zone. The value name \u003Ccode>2101\u003C\u002Fcode> identifies the \u003Ccode>URLACTION_FEATURE_ZONE_ELEVATION\u003C\u002Fcode> URL action (\u003Ccode>0x00002101\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\2101 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyzoneelevationurlaction-7\">Web sites in less privileged Web content zones can navigate into this zone\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowlessprivilegedsites\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowLessPrivilegedSites\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dfb241699a\">Allow cut, copy or paste operations from the clipboard via script\u003C\u002Fh3>\n\u003Cp>This policy controls whether scripts in webpages assigned to the Internet zone may perform clipboard operations such as cut, copy, or paste. The \u003Ccode>3\u003C\u002Fcode> in the registry path identifies the Internet zone.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3\\1407 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowpasteviascript-1\">Allow cut, copy or paste operations from the clipboard via script\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#internetzoneallowcopypasteviascript\">Microsoft Learn: InternetExplorer Policy CSP – InternetZoneAllowCopyPasteViaScript\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c32dab408f\">Allow cut, copy or paste operations from the clipboard via script\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1407\u003C\u002Fcode> registry value controls whether scripts in the Internet Explorer Restricted Sites security zone can perform clipboard operations such as cut, copy, or paste. It represents the \u003Ccode>URLACTION_SCRIPT_PASTE\u003C\u002Fcode> URL security action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1407 = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policyallowpasteviascript-7\">Allow cut, copy or paste operations from the clipboard via script\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszoneallowcopypasteviascript\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneAllowCopyPasteViaScript\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bdd8e599bf\">Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled\u003C\u002Fh3>\n\u003Cp>This policy prevents Internet Explorer from falling back from Enhanced Protected Mode to regular Protected Mode so that an incompatible ActiveX control can run.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\DisableEPMCompat = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-disableepmcompat\">Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#donotallowactivexcontrolsinprotectedmode\">Microsoft Learn: InternetExplorer Policy CSP – DoNotAllowActiveXControlsInProtectedMode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-07345a29f9\">Turn off encryption support\u003C\u002Fh3>\n\u003Cp>This policy setting determines which SSL and TLS protocol versions Internet Explorer and applications that obtain their connection settings from WinINet may use. \u003Ccode>SecureProtocols\u003C\u002Fcode> is a \u003Ccode>REG_DWORD\u003C\u002Fcode> bitmask representing the permitted protocols from SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\SecureProtocols = 2560 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-advanced-setwininetprotocols\">Turn off encryption support\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#disableencryptionsupport\">Microsoft Learn: InternetExplorer Policy CSP – DisableEncryptionSupport\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-54356d92e3\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fh3>\n\u003Cp>This user-scoped, ADMX-backed policy controls the Internet Explorer AutoComplete feature for user names and passwords in web forms. The feature can retain credentials entered by the user and suggest them again on subsequent visits.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FormSuggest Passwords = no (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-restrictformsuggestpw\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowautocomplete\">Microsoft Learn: InternetExplorer Policy CSP – AllowAutoComplete\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ea931f8dd2\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fh3>\n\u003Cp>This user-scoped, ADMX-backed policy controls the Internet Explorer AutoComplete feature for user names and passwords in web forms. The feature can retain credentials entered by the user and suggest them again on subsequent visits.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Internet Explorer\\Control Panel\\FormSuggest Passwords = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-restrictformsuggestpw\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowautocomplete\">Microsoft Learn: InternetExplorer Policy CSP – AllowAutoComplete\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-407322e57c\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fh3>\n\u003Cp>This user-scoped, ADMX-backed policy controls the Internet Explorer AutoComplete feature for user names and passwords in web forms. The feature can retain credentials entered by the user and suggest them again on subsequent visits.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FormSuggest PW Ask = no (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#edge-internet-explorer\">Policies › Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-restrictformsuggestpw\">Turn on the auto-complete feature for user names and passwords on forms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#allowautocomplete\">Microsoft Learn: InternetExplorer Policy CSP – AllowAutoComplete\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien\">Policy reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung\">Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen\">Virus protection and attack surface\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":16,"id":23,"text":24},"see-also","See also","\u002Fen\u002Fdocumentation",[27,47,59,67,115,135,151,167,191,207,223],{"titel":28,"pfad":29,"seiten":30},"Getting started","erste-schritte",[31,35,39,43],{"rel":32,"titel":33,"zu":34},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fwas-ist-setup-foundry",{"rel":36,"titel":37,"zu":38},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Finstallation",{"rel":40,"titel":41,"zu":42},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fschnellstart",{"rel":44,"titel":45,"zu":46},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fablauf",{"titel":48,"pfad":49,"seiten":50},"Setup","wizard",[51,55],{"rel":52,"titel":53,"zu":54},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fuebersicht",{"rel":56,"titel":57,"zu":58},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystemanforderungen",{"titel":60,"pfad":61,"seiten":62},"Setup in detail","einrichtung-detail",[63],{"rel":64,"titel":65,"zu":66},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Feinrichtung-detail\u002Fwindows-quelle",{"titel":68,"pfad":69,"seiten":70},"Foundry","konfiguration",[71,75,79,83,87,91,95,99,103,107,111],{"rel":72,"titel":73,"zu":74},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fprofile",{"rel":76,"titel":77,"zu":78},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fquellen",{"rel":80,"titel":81,"zu":82},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbenutzer",{"rel":84,"titel":85,"zu":86},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbilder",{"rel":88,"titel":89,"zu":90},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fwindows-bereinigen",{"rel":92,"titel":93,"zu":94},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fapps-entfernen",{"rel":96,"titel":97,"zu":98},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fauswaehlen",{"rel":100,"titel":101,"zu":102},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien",{"rel":104,"titel":105,"zu":106},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fpc-informationen",{"rel":108,"titel":109,"zu":110},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fnamensschema",{"rel":112,"titel":113,"zu":114},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Finstall-assist-gestalten",{"titel":116,"pfad":117,"seiten":118},"Installation","installationsmedien",[119,123,127,131],{"rel":120,"titel":121,"zu":122},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fusb-stick",{"rel":124,"titel":125,"zu":126},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fiso-erstellen",{"rel":128,"titel":129,"zu":130},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fvhd-erstellen",{"rel":132,"titel":133,"zu":134},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Finstall-assist",{"titel":136,"pfad":137,"seiten":138},"Machines","pruefmaschine",[139,143,147],{"rel":140,"titel":141,"zu":142},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fhyper-v-berechtigungen",{"rel":144,"titel":145,"zu":146},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fverwenden",{"rel":148,"titel":149,"zu":150},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Ferstellen",{"titel":152,"pfad":153,"seiten":154},"Editions","editionen",[155,159,163],{"rel":156,"titel":157,"zu":158},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditionen\u002Fvergleich",{"rel":160,"titel":161,"zu":162},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditionen\u002Flizenz-aktivieren",{"rel":164,"titel":165,"zu":166},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditionen\u002Faktivierungen-zuruecksetzen",{"titel":168,"pfad":169,"seiten":170},"Troubleshooting","fehler",[171,175,179,183,187],{"rel":172,"titel":173,"zu":174},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fusb",{"rel":176,"titel":177,"zu":178},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fiso",{"rel":180,"titel":181,"zu":182},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fhyperv",{"rel":184,"titel":185,"zu":186},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ffehler\u002Finstall-assist",{"rel":188,"titel":189,"zu":190},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fantwortdatei",{"titel":192,"pfad":193,"seiten":194},"Reference","referenz",[195,199,203],{"rel":196,"titel":197,"zu":198},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fbekannte-probleme",{"rel":200,"titel":201,"zu":202},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fdiagnose-und-protokolle",{"rel":204,"titel":205,"zu":206},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fglossar",{"titel":208,"pfad":209,"seiten":210},"Windows appendix","windows-anhang",[211,215,219],{"rel":212,"titel":213,"zu":214},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fdienste",{"rel":216,"titel":217,"zu":218},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Faufgaben",{"rel":220,"titel":221,"zu":222},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fapps",{"titel":224,"pfad":225,"seiten":226},"Policy appendix","richtlinien-anhang",[227,231,235,236,240,244,248,252,256,260,264,268,272],{"rel":228,"titel":229,"zu":230},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien",{"rel":232,"titel":233,"zu":234},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung",{"rel":6,"titel":9,"zu":7},{"rel":237,"titel":238,"zu":239},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen",{"rel":241,"titel":242,"zu":243},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-netzwerk-freigaben",{"rel":245,"titel":246,"zu":247},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie",{"rel":249,"titel":250,"zu":251},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung",{"rel":253,"titel":254,"zu":255},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-anmeldung-konten",{"rel":257,"titel":258,"zu":259},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien",{"rel":261,"titel":262,"zu":263},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-kernschutz",{"rel":265,"titel":266,"zu":267},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",{"rel":269,"titel":270,"zu":271},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update",{"rel":273,"titel":274,"zu":275},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-grundeinstellungen",{"titel":233,"zu":234},{"titel":238,"zu":239},1793199133651]