[{"data":1,"prerenderedAt":278},["ShallowReactive",2],{"doku:en:richtlinien-anhang\u002Frichtlinien-office-haertung":3},{"seite":4,"start":25,"leiste":26,"bereich":224,"zurueck":276,"weiter":277},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14},"en","richtlinien-anhang\u002Frichtlinien-office-haertung","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung","referenz-richtlinien-office-haertung","Office hardening","Every setting of the “Office hardening” package with its effect, value and recommending sources.","since 0.9.8.11",true,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cp>This page lists every setting of the “Office hardening” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.\u003C\u002Fp>\n\u003Cp>287 settings.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"e-4b69c41aa2\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7d2524303a\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-828f3a667e\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-64bd68c106\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ce5b5fac56\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-30a1eed0ea\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eed163ce39\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2644cc0d8d\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f60d9db9b2\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-607528b82a\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e797a19c69\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8194a0e433\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3321282996\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c6d762ad0e\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7962278039\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-466ebdc0a4\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-96308ffd28\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f739144323\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1e0b604484\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d34dd558a5\">Do not override Flash ActiveX activation blocking (Office, CLSID 6E)\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>DWORD\u003C\u002Fcode> value controls an exception to the Office COM kill bit for the ActiveX control identified by Microsoft as \u003Cstrong>Shockwave Flash Object\u003C\u002Fstrong>, CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-d34dd558a58a-activationfilteroverride\">Do not override Flash ActiveX activation blocking (Office, CLSID 6E)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecurityadvisories\u002F2016\u002F2755801\">Microsoft Learn: Microsoft Security Advisory 2755801\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b2b79d24da\">Block Flash activation in Office documents\u003C\u002Fh3>\n\u003Cp>This machine-wide \u003Ccode>REG_DWORD\u003C\u002Fcode> value applies to the COM object that Microsoft identifies as “Macromedia Flash Factory Object,” with CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-b2b79d24da27-activationfilteroverride\">Block Flash activation in Office documents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-01c401db7a\">Do not allow activation of Macromedia Flash Factory Object (Office 16.0)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>ActivationFilterOverride\u003C\u002Fcode> DWORD value controls an exception to the Office COM kill bit for \u003Ccode>Macromedia Flash Factory Object\u003C\u002Fcode>, identified by CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-01c401db7a57-activationfilteroverride\">Do not allow activation of Macromedia Flash Factory Object (Office 16.0)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ca487ddf85\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-712482a272\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ec9d4f29c0\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-fbad0a38e1\">Restrict ActiveX Install\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_RESTRICT_ACTIVEXINSTALL\u003C\u002Fcode> separately for each listed Microsoft Office process. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables the restriction for the executable identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_activexinstall\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictactivexinstall\">Restrict ActiveX Install\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictactivexinstallinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – RestrictActiveXInstallInternetExplorerProcesses\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-417ffbec5b\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ffcb1e88fe\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-332c97c1ad\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2295f58f16\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6fb4a9f299\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1ed17bf05d\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7a7daafd68\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-41f806a671\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1ffb2d6333\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d617fb4db7\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4d38f8079f\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-166bf4f315\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-465200889d\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2187cf4e55\">Restrict File Download\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_RESTRICT_FILEDOWNLOAD\u003C\u002Fcode> security feature separately for each listed executable. The feature applies when one of these processes uses Internet Explorer's URL-security or browser-control infrastructure.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_restrict_filedownload\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-restrictfiledownload\">Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictfiledownloadinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Restrict File Download\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b08aeb729a\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5d37af2a00\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bf5158e41c\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-465047fe7e\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cd314ac9f3\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-198b1483be\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-57555b84fb\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-845f38efcb\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-deafc25568\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0047af60f7\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f97d168da3\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f5785c78ee\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e331991505\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a6de3574a4\">Object Caching Protection\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer feature control \u003Ccode>FEATURE_OBJECT_CACHING\u003C\u002Fcode> for each named Office application. The protection prevents web content processed by the application from accessing or instantiating cached ActiveX controls originating from a different domain or security context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_object_caching\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-objectcachingprotection\">Object Caching Protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls – ActiveX Object Caching](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330729(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4c0a2953b9\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-487bcd65f0\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a5672c0e44\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f040347605\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6db26d79f4\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-da86b2299d\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-68ac7285e5\">Do not allow Flash activation in Office (CLSID 6E, 16.0)\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>DWORD\u003C\u002Fcode> value controls an exception to the Office COM activation filter for the ActiveX control identified by Microsoft as \u003Cstrong>Shockwave Flash Object\u003C\u002Fstrong>, CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-68ac7285e513-activationfilteroverride\">Do not allow Flash activation in Office (CLSID 6E, 16.0)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f7f05557ab\">Block Flash activation in Office documents (CLSID 6E, Common)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>ActivationFilterOverride\u003C\u002Fcode> DWORD value controls an exception to the Office COM kill bit for the \u003Ccode>Shockwave Flash Object\u003C\u002Fcode>, identified by CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f7f05557ab64-activationfilteroverride\">Block Flash activation in Office documents (CLSID 6E, Common)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2fe986cd7b\">Block Flash activation in Office documents (CLSID 70, 16.0)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>ActivationFilterOverride\u003C\u002Fcode> DWORD value controls an exception to Office activation blocking for the \u003Ccode>Macromedia Flash Factory Object\u003C\u002Fcode>, identified by CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-2fe986cd7baa-activationfilteroverride\">Block Flash activation in Office documents (CLSID 70, 16.0)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Fsecurity-baseline\">Microsoft Learn: Security baseline for Microsoft 365 Apps for enterprise\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f2f18ed7f4\">Do not allow Flash activation in Office (CLSID 70, Common)\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>DWORD\u003C\u002Fcode> value applies to the \u003Cstrong>Macromedia Flash Factory Object\u003C\u002Fstrong>, identified by CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Microsoft Office includes this COM object among the controls that are blocked from activation by default.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f2f18ed7f4a8-activationfilteroverride\">Do not allow Flash activation in Office (CLSID 70, Common)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-32f821028b\">Office COM kill bit for Shockwave Flash Object\u003C\u002Fh3>\n\u003Cp>Setting the \u003Ccode>Compatibility Flags\u003C\u002Fcode> DWORD to \u003Ccode>1024\u003C\u002Fcode> (hexadecimal \u003Ccode>0x00000400\u003C\u002Fcode>) applies the Office COM kill bit to the \u003Ccode>Shockwave Flash Object\u003C\u002Fcode> COM class identified by CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Office consequently prevents this Flash ActiveX control from being activated.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-32f821028ba0-compatibility-flags\">Office COM kill bit for Shockwave Flash Object\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5aaa1aa57c\">Block the Macromedia Flash Factory Object in Office 16.0\u003C\u002Fh3>\n\u003Cp>Setting the \u003Ccode>Compatibility Flags\u003C\u002Fcode> DWORD to \u003Ccode>1024\u003C\u002Fcode> (\u003Ccode>0x00000400\u003C\u002Fcode>) applies the Office COM kill bit to the COM object whose CLSID is \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Microsoft identifies this object as the \u003Cstrong>Macromedia Flash Factory Object\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-5aaa1aa57cb2-compatibility-flags\">Block the Macromedia Flash Factory Object in Office 16.0\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-80ff726a74\">Disable the Flash ActiveX control using the Office kill bit\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>Compatibility Flags\u003C\u002Fcode> value is a \u003Ccode>REG_DWORD\u003C\u002Fcode>. Setting its data to \u003Ccode>1024\u003C\u002Fcode> (\u003Ccode>0x00000400\u003C\u002Fcode>) prevents Microsoft Office from activating the COM object identified by CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Microsoft identifies this ActiveX control as \u003Cstrong>Shockwave Flash Object\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-80ff726a7491-compatibility-flags\">Disable the Flash ActiveX control using the Office kill bit\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2015\u002Fms15-131\">Microsoft Learn: Microsoft Security Bulletin MS15-131 — Critical\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-974d204972\">Office COM kill bit for Macromedia Flash Factory Object\u003C\u002Fh3>\n\u003Cp>Setting the \u003Ccode>Compatibility Flags\u003C\u002Fcode> DWORD to \u003Ccode>1024\u003C\u002Fcode> (\u003Ccode>0x00000400\u003C\u002Fcode>) applies the Office COM kill bit to CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Microsoft identifies this COM class as \u003Cstrong>Macromedia Flash Factory Object\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-974d20497292-compatibility-flags\">Office COM kill bit for Macromedia Flash Factory Object\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bcc2d228f6\">Block Flash activation in Office documents\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>ActivationFilterOverride\u003C\u002Fcode> DWORD controls an exception to the Microsoft Office COM activation filter. Under CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>, it applies to the \u003Cstrong>Shockwave Flash Object\u003C\u002Fstrong> ActiveX control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\WOW6432Node\\Microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\ActivationFilterOverride = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-bcc2d228f668-activationfilteroverride\">Block Flash activation in Office documents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference for Microsoft Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-49bfaa7e60\">Disable Adobe Flash Player in Office (CLSID 6E, 16.0)\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>1024\u003C\u002Fcode>, equivalent to \u003Ccode>0x00000400\u003C\u002Fcode>, sets the Office COM kill bit for the COM object identified by CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. This CLSID identifies the Adobe Flash Player ActiveX control named “Shockwave Flash Object.”\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-49bfaa7e60db-compatibility-flags\">Disable Adobe Flash Player in Office (CLSID 6E, 16.0)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecurityadvisories\u002F2016\u002F2755801\">Microsoft Learn: Microsoft Security Advisory 2755801\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-361f9997ef\">Office COM kill bit for Shockwave Flash Object\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>Compatibility Flags\u003C\u002Fcode> \u003Ccode>DWORD\u003C\u002Fcode> value set to \u003Ccode>1024\u003C\u002Fcode> (\u003Ccode>0x00000400\u003C\u002Fcode>) applies the Office COM kill bit to CLSID \u003Ccode>{D27CDB6E-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. This CLSID identifies the \u003Cstrong>Shockwave Flash Object\u003C\u002Fstrong> ActiveX control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\Common\\COM Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-361f9997efa7-compatibility-flags\">Office COM kill bit for Shockwave Flash Object\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2016\u002Fms16-093\">Microsoft Learn: Microsoft Security Bulletin MS16-093\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e80272cc97\">Block Flash control with the Office COM kill bit (CLSID 70, 16.0)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>Compatibility Flags\u003C\u002Fcode> DWORD with value data \u003Ccode>1024\u003C\u002Fcode> (\u003Ccode>0x00000400\u003C\u002Fcode>) sets the Office COM kill bit for CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>. Microsoft identifies the associated ActiveX control as \u003Cstrong>Macromedia Flash Factory Object\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\16.0\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-e80272cc9767-compatibility-flags\">Block Flash control with the Office COM kill bit (CLSID 70, 16.0)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ed1042efb4\">Office COM kill bit for Macromedia Flash Factory Object\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>Compatibility Flags\u003C\u002Fcode> value is a \u003Ccode>DWORD\u003C\u002Fcode>. Setting its data to \u003Ccode>1024\u003C\u002Fcode> (hexadecimal \u003Ccode>0x00000400\u003C\u002Fcode>) applies the Office COM kill bit to CLSID \u003Ccode>{D27CDB70-AE6D-11CF-96B8-444553540000}\u003C\u002Fcode>, which Microsoft identifies as \u003Cstrong>Macromedia Flash Factory Object\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\Office\\Common\\COM Compatibility\\{D27CDB70-AE6D-11CF-96B8-444553540000}\\Compatibility Flags = 1024 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ed1042efb46a-compatibility-flags\">Office COM kill bit for Macromedia Flash Factory Object\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fservicing\u002Foffice\u002Ftroubleshooting\u002Fsecurity-settings-for-com-objects-in-office\">Microsoft Support: Security Settings for COM objects in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b3252de8b5\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8a84edfa08\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ffa23ffbc3\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0641f292a7\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c6a239935b\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-28c6ebf3d5\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b36f1b82b4\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bac07bec56\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f94efcdd26\">Add-on Management\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_ADDON_MANAGEMENT\u003C\u002Fcode> feature separately for the listed executable files. It applies when one of these applications processes web content through the Internet Explorer WebBrowser Control.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_addon_management\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-addonmanagement\">Add-on Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: Internet Feature Controls (U..Y) – WebOC Addon Management](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fgeneral-info\u002Fee330736(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-93963d866a\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f4cea69a81\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3a1eaf046c\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ae42ca1212\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d77b9e96b8\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e845508381\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-53bfd50c4e\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-319955b2e3\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4c06282c18\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2fcae6718c\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c1a65dc276\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c0c93e82c2\">Mime Sniffing Safety Feature\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_SNIFFING\u003C\u002Fcode> feature separately for each listed executable. It applies when one of those processes handles web-based content through the legacy Internet Explorer and URLMON platform components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_sniffing\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-mimesniffingsafetyfature\">Mime Sniffing Safety Feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-42034ba014\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2a22d22cd8\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-aed67df204\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bd49b2ea1b\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eac22f62a8\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f0f6e85c5f\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-625875d856\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c7381a44eb\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7400dad875\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b3ed0d1b25\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e26cfc59ae\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5c6ebe2fac\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f61be08ae3\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-699fa8d985\">Consistent Mime Handling\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_MIME_HANDLING\u003C\u002Fcode> security feature separately for each listed executable. It takes effect when the corresponding process handles content through Internet Explorer or URLMon components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_mime_handling\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-consistentmimehandling\">Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Consistent Mime Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e6116f14af\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3de1f66b29\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b9b96cf5ad\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a692fb9640\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bf89b7a2ac\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e88262d065\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1b0ad73547\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-669b14664b\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-54f2ce0cdf\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3531aa5b9c\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b4ccace8cf\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2a57feee86\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4de9df73fe\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a6c8d0a0e5\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-88987dfa09\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d20ce98642\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0b3f43bd92\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-888864a75d\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-73792e5d94\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-44602a66f7\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-62b7025480\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ddbc2b9c90\">Disable user name and password\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature named \u003Ccode>FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\u003C\u002Fcode> separately for each listed executable. An enabled \u003Ccode>REG_DWORD\u003C\u002Fcode> value with data \u003Ccode>1\u003C\u002Fcode> prevents the corresponding application from opening HTTP or HTTPS URLs containing embedded user information through the affected Internet Explorer or URLMON components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_http_username_password_disable\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disableusernameandpassword\">Disable user name and password\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-be1837a384\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e938ba12da\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1b06cbe86f\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1697acdbaa\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-091e879890\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-438a9e420a\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-91503ac2e0\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-707be30a80\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-982a5c4a2f\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bc79bad156\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6919287aaf\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cde98d302d\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1e99bc5bf1\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b9765ec7b3\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e7721a3f4f\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4474dccf01\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9ecb2d54c7\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dc1575761d\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dbdd3f62b3\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-312c47c6d0\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e97198f195\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c9d93dfaef\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9c5180d3fc\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a4ca393faf\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e2e1764712\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-86dfe74b0b\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-885bf1eef6\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1325d8a756\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6da2738f46\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f2f608b2d4\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c5edf5d437\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-71889e75c3\">Information Bar\u003C\u002Fh3>\n\u003Cp>These application-specific registry values control the Internet Explorer \u003Ccode>FEATURE_SECURITYBAND\u003C\u002Fcode> feature for each named executable. The feature displays the Internet Explorer Information Bar when a file download or code installation has been restricted by another security setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_securityband\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-informationbar\">Information Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-faa69a108b\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1064b3f855\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-82ecf4efbc\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6852accb37\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c2a2103742\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8a752a8682\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-19e78aa0a0\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f245f2b8ea\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f76a907056\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-25a3f70075\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-939b1f1170\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4665de7907\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-193c471826\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b18dbc2771\">Local Machine Zone Lockdown Security\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer feature control named \u003Ccode>FEATURE_LOCALMACHINE_LOCKDOWN\u003C\u002Fcode> individually for the listed executables. It applies when one of those processes handles local web content through Internet Explorer or MSHTML components.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_localmachine_lockdown\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-localmachinezonelockdownsecurity\">Local Machine Zone Lockdown Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eec4d4443b\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-51b1c538de\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-81146a6475\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-645561fdff\">Saved from URL\u003C\u002Fh3>\n\u003Cp>This setting controls the process-specific Internet Explorer feature control \u003Ccode>FEATURE_UNC_SAVEDFILECHECK\u003C\u002Fcode> for the listed Office applications. Each application name is represented by a separate \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> enables the check for that process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_unc_savedfilecheck\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-savedfromurl\">Saved from URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9a349c014b\">Scripted Window Security Restrictions\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_WINDOW_RESTRICTIONS\u003C\u002Fcode> feature separately for the listed executables. A value of \u003Ccode>1\u003C\u002Fcode>, stored as \u003Ccode>REG_DWORD\u003C\u002Fcode>, enables the feature for the process identified by that value name.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_window_restrictions\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-scriptedwindowsecurityrestrictions\">Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#scriptedwindowsecurityrestrictionsinternetexplorerprocesses\">Microsoft Learn: InternetExplorer Policy CSP – Scripted Window Security Restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5bb6540ab4\">Navigate URL\u003C\u002Fh3>\n\u003Cp>This setting controls the Internet Explorer \u003Ccode>FEATURE_VALIDATE_NAVIGATE_URL\u003C\u002Fcode> feature control separately for the listed Office executables. When enabled for a process, the Internet Explorer navigation component blocks navigation to pages whose URLs are malformed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_validate_navigate_url\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-navigateurl\">Navigate URL\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: [Microsoft Learn: INTERNETFEATURELIST enumeration](https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Finternet-explorer\u002Fie-developer\u002Fplatform-apis\u002Fms537169(v=vs.85)\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-826093874f\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\excel.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6ba6701f84\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\exprwd.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-526450911d\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\groove.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8e941c6807\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\msaccess.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7ac795a35b\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\mse7.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b3b299b995\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\mspub.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e55941fc38\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\onenote.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0b236916db\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\outlook.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-42ef624802\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\powerpnt.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-45ef12b6bf\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\pptview.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b5bddd7aab\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\spdesign.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-37fda728df\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\visio.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7f65bce531\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\winproj.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8ac4f8c76f\">Protection From Zone Elevation\u003C\u002Fh3>\n\u003Cp>This machine-level Office policy controls the Internet Explorer \u003Ccode>FEATURE_ZONE_ELEVATION\u003C\u002Fcode> security feature separately for the listed executables. A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> opts the process whose executable name matches the value name into zone-elevation protection.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\software\\microsoft\\internet explorer\\main\\featurecontrol\\feature_zone_elevation\\winword.exe = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectionfromzoneelevation\">Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer\">Microsoft Learn: InternetExplorer Policy CSP – Protection From Zone Elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-946c7f8c8a\">Allow Active X One Off Forms\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines which ActiveX controls classic Outlook for Windows may load in one-off forms. A one-off form stores its form definition in the individual Outlook item instead of referring to a published form.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\allowactivexoneoffforms = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-allowactivexoneoffforms\">Allow Active X One Off Forms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-84c63b64e8\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether PowerPoint can run VBA macros in files that Windows identifies as originating from the internet or another untrusted zone. Windows commonly records that origin by applying Mark of the Web (MOTW), for example to browser downloads and email attachments.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dfffc9a9e7\">Always open untrusted database files in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy determines whether database files in \u003Ccode>.dbf\u003C\u002Fcode> format are always opened in Protected View when they originate from an untrusted location.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\protectedview\\enabledatabasefileprotectedview = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-enabledatabasefileprotectedview\">Always open untrusted database files in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Settings for the Microsoft 365 Apps for Enterprise security baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-fd745ce569\">Always prevent untrusted Microsoft Query files from opening\u003C\u002Fh3>\n\u003Cp>This user policy determines whether Excel opens Microsoft Query files from untrusted locations. It covers \u003Ccode>.iqy\u003C\u002Fcode>, \u003Ccode>.oqy\u003C\u002Fcode>, \u003Ccode>.dqy\u003C\u002Fcode>, and \u003Ccode>.rqy\u003C\u002Fcode> files. These files can define connections to external data sources, import data into a worksheet, and refresh that data later.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\external content\\enableblockunsecurequeryfiles = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-enableblockunsecurequeryfiles\">Always prevent untrusted Microsoft Query files from opening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a57e05e30b\">Block OLE Graph\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy prevents the legacy Object Linking and Embedding (OLE) Graph functionality from running in Microsoft 365 Apps. It specifically covers OLE components such as \u003Ccode>MSGraph.Application\u003C\u002Fcode> and \u003Ccode>MSGraph.Chart\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\security\\blockolegraph = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-blockolegraph\">Block OLE Graph\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbaseline-security-mode\u002Fblock-ole-graph-org-chart-objects?view=o365-worldwide\">Microsoft Learn: Block OLE Graph and OrgChart objects\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-75fc19607f\">Block OrgChart\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether the legacy Organization Chart (OrgChart) Add-in for Microsoft Office programs can run. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value: \u003Ccode>1\u003C\u002Fcode> blocks the add-in in Office applications that support the policy. Embedded OrgChart objects are not loaded as active objects; Office renders a static image instead.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\security\\blockorgchart = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-blockorgchart\">Block OrgChart\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-51ff8d262d\">Prevent users from customizing attachment security settings\u003C\u002Fh3>\n\u003Cp>This per-user policy value prevents users from overriding the set of attachment types blocked by Outlook through their own attachment security settings. When the policy is enabled, it is represented by the \u003Ccode>disallowattachmentcustomization\u003C\u002Fcode> value of type \u003Ccode>REG_DWORD\u003C\u002Fcode> with data \u003Ccode>1\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\disallowattachmentcustomization = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-preventusersfromcustomizingattachmentsecuritysettings\">Prevent users from customizing attachment security settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information for administrators about e-mail security settings in Outlook 2007\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0fc198384e\">Protect document metadata for rights managed Office Open XML Files\u003C\u002Fh3>\n\u003Cp>This user-scoped policy setting controls whether Word, Excel, and PowerPoint encrypt metadata in Office Open XML files protected by Information Rights Management (IRM).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\security\\drmencryptproperty = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-protectdocumentmetadataforrightsmanaged\">Protect document metadata for rights managed Office Open XML Files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=49030\">Microsoft Download Center: Administrative Template files (ADMX\u002FADML) for Microsoft Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-be33d74380\">Disable the Office client from polling the SharePoint Server for published links\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Office applications poll an Office or SharePoint server for published links.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\portal\\linkpublishingdisabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disabletheofficeclientfrompolling\">Disable the Office client from polling the SharePoint Server for published links\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fgovernance\u002Fdocument-library-planning\">Microsoft Learn: Plan document libraries in SharePoint Server\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2328620df9\">Load pictures from Web pages not created in Excel\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Excel loads pictures when it opens or imports a Web page that was not created in Excel.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\internet\\donotloadpictures = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-loadpicturesfromwebpagesnotcreatedinexcel\">Load pictures from Web pages not created in Excel\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fexcel.defaultweboptions.loadpictures\">Microsoft Learn: DefaultWebOptions.LoadPictures property (Excel)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a75abe94ab\">Disable AutoRepublish\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy controls the AutoRepublish feature. AutoRepublish can write previously published workbook content to a static Web page again whenever the workbook is saved.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\options\\disableautorepublish = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-disableautorepublish\">Disable AutoRepublish\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fexcel.publishobject.autorepublish\">Microsoft Learn: PublishObject.AutoRepublish property (Excel)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-83aa5727aa\">Configure Outlook object model prompt when responding to meeting and task requests\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls the Outlook Object Model Guard when an untrusted program uses the Outlook object model's \u003Ccode>Respond\u003C\u002Fcode> method to respond to a meeting request or task request. It applies to programmatically creating or sending such responses, not to responses initiated manually by the user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoommeetingtaskrequestresponse = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oommeetingtaskrequest\">Configure Outlook object model prompt when responding to meeting and task requests\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bbbe4ab09a\">ActiveX Control Initialization\u003C\u002Fh3>\n\u003Cp>This user-scoped policy value controls how Office applications initialize ActiveX controls. Its behavior depends on whether a control is marked Safe for Initialization (SFI) or Unsafe for Initialization (UFI), whether the control is initialized in safe mode, and whether persisted values stored in the document are used.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\common\\security\\uficontrols = 6 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-activexcontrolinitialization\">ActiveX Control Initialization\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e9ae22a481\">Turn off file validation\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls Office File Validation in PowerPoint. File validation examines legacy PowerPoint binary files before they are opened and checks their internal structure against the rules of the expected file format. The affected formats include PowerPoint 97–2003 presentations, shows, and templates, such as files with \u003Ccode>.ppt\u003C\u002Fcode>, \u003Ccode>.pps\u003C\u002Fcode>, and \u003Ccode>.pot\u003C\u002Fcode> extensions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\filevalidation\\enableonload = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-turnofffilevalidation\">Turn off file validation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ddf4c79b2d\">Turn off file validation\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls Office File Validation when Excel opens files. File validation compares the structure of Office 97–2003 binary documents with the expected file-format schema before Excel opens them.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\filevalidation\\enableonload = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-turnofffilevalidation\">Turn off file validation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ef715a3d81\">Set document behavior if file validation fails\u003C\u002Fh3>\n\u003Cp>This user policy controls how Excel 2016 and other Excel releases in the Office 16.0 product family handle workbooks that fail Office File Validation. File Validation examines the structure of supported files for irregularities that might indicate corrupted or potentially harmful content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\filevalidation\\openinprotectedview = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-setdocumentbehavioriffilevalidationfails\">Set document behavior if file validation fails\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fexcel.application.filevalidation\">Microsoft Learn: Application.FileValidation property (Excel)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-86a346dec3\">Block Excel XLL Add-ins that come from an untrusted source\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy controls whether XLL add-ins from untrusted sources can run. XLL files contain executable add-in code and can extend Excel with custom functions and other capabilities.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\blockxllfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-blockxllfrominternet\">Block Excel XLL Add-ins that come from an untrusted source\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-48a7f3efa8\">Display Level 1 attachments\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether attachments whose file types are classified as Level 1 are accessible in classic Outlook. Outlook assigns potentially dangerous file types to Level 1 and normally blocks access to them completely.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\showlevel1attach = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-level1attachments\">Display Level 1 attachments\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information for administrators about email security settings in Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d6586209e3\">Remove file extensions blocked as Level 2\u003C\u002Fh3>\n\u003Cp>This string value (\u003Ccode>REG_SZ\u003C\u002Fcode>) identifies file name extensions that Outlook removes from the Level 2 attachment list. Multiple extensions are separated by semicolons within the value.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\fileextensionsremovelevel2 = ; (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-level2removefilepolicy\">Remove file extensions blocked as Level 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information about e-mail security settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5f6c613849\">Allow hyperlinks in suspected phishing e-mail messages\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Outlook makes hyperlinks usable in messages identified as suspected phishing but not also classified as junk e-mail.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\options\\mail\\junkmailenablelinks = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-enablelinksinemailmessages\">Allow hyperlinks in suspected phishing e-mail messages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9da155649a\">Automation Security\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls how Excel, PowerPoint, and Word handle macros when another application starts the Office application programmatically. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value whose data corresponds to the Office \u003Ccode>MsoAutomationSecurity\u003C\u002Fcode> enumeration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\common\\security\\automationsecurity = 2 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-automationsecurity\">Automation Security\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Foffice.msoautomationsecurity\">Microsoft Learn: MsoAutomationSecurity enumeration (Office)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-362d802402\">Macro Runtime Scan Scope\u003C\u002Fh3>\n\u003Cp>This value determines which macro-enabled files Office submits for runtime inspection through the Antimalware Scan Interface (AMSI). It applies to VBA macros in supported Office applications and to Excel 4.0 (XLM) macros, which are supported only by Excel.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\security\\macroruntimescanscope = 2 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-macroruntimescanscope\">Macro Runtime Scan Scope\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Settings for the Microsoft 365 Apps for Enterprise security baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-657d145443\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Microsoft Access can run macros in Office files that Windows identifies as originating from the internet or another untrusted zone. That origin is commonly represented by Mark of the Web (MOTW), for example on downloaded files and email attachments.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\access\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-access16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8ced7a8948\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy blocks VBA macros in files that Windows or Office identifies as originating from the internet. Typical examples include downloaded files and email attachments carrying Mark of the Web (MOTW). Files on network shares can also be affected when the location is classified in the Internet zone and is not recognized as trusted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7fe81b2ecd\">Security setting for macros\u003C\u002Fh3>\n\u003Cp>This per-user policy value selects the security level applied to VBA macros in classic Outlook for Windows. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value with the following supported settings:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\level = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-securityleveloutlook\">Security setting for macros\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoftteams\u002Fteams-meeting-addin-security-with-outlook\">Microsoft Learn: Teams meeting add-in security when using your Outlook client\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d9ed44d6ca\">Minimum encryption settings\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>minenckey\u003C\u002Fcode> value defines the minimum encryption-key length against which Outlook evaluates encrypted e-mail messages for the current user. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode>; its data represents the key length in bits.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\minenckey = 168 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-minimumencryptionsettings\">Minimum encryption settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a392f50a7f\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Microsoft Access can use network paths as Trusted Locations. Its type is \u003Ccode>REG_DWORD\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\access\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-access16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations\">Microsoft Learn: Trusted Locations for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b4a6ed610b\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy setting controls whether network locations can be used as Trusted Locations. When the policy is enabled, Excel recognizes network locations that have been designated as trusted. The setting does not designate a path by itself; Trusted Location paths must be defined separately.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations#allow-trusted-locations-on-the-network-policy\">Microsoft Learn: Trusted Locations for Office files – “Allow Trusted Locations on the network” policy\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e92aa52145\">Allow users to demote attachments to Level 2\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether users of classic Outlook may reclassify attachment file types from Level 1 to Level 2.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\allowuserstolowerattachments = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-allowuserstolowerattachments\">Allow users to demote attachments to Level 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings#let-users-demote-attachments-to-level-2\">Microsoft Learn: Information about e-mail security settings — Let users demote attachments to Level 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b0e3a5eb5e\">Outlook Security Mode\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>adminsecuritymode\u003C\u002Fcode> \u003Ccode>REG_DWORD\u003C\u002Fcode> value selects the source from which classic Outlook obtains administrative security settings for the current user. It does not itself contain individual rules for attachments, add-ins, custom forms, or access through the Outlook object model.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\adminsecuritymode = 3 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-outlooksecuritymode\">Outlook Security Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-db31d255a3\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether PowerPoint can use network locations as Trusted Locations.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations\">Microsoft Learn: Trusted Locations for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bae89da63c\">Run Programs\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether PowerPoint can launch external programs through the Run Program action. This action can be assigned to an object or action button in a presentation and invoked by the user during a slide show.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\runprograms = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-runprograms\">Run Programs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-02342380e0\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user policy setting controls whether Microsoft Project can run VBA macros in files that Windows or Office identifies as originating from the internet. This primarily includes files carrying Mark of the Web (MOTW), such as browser downloads and email attachments. Files opened from network shares can also be affected when the location is assigned to the Internet zone and is not considered trusted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\ms project\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-proj16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7b7783b4fe\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user policy setting controls whether Microsoft Project can use Trusted Locations hosted on network shares or other remote locations.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\ms project\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-proj16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations\">Microsoft Learn: Trusted Locations for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a6e5a5e921\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\publisher\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c2fa815af0\">Publisher Automation Security Level\u003C\u002Fh3>\n\u003Cp>This per-user policy value determines how Microsoft Publisher handles macros in publications opened programmatically by another application. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> corresponding to the automation security mode used by Publisher:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\common\\security\\automationsecuritypublisher = 2 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-pub16-office-microsoft-policies-windows-l-publisherautomationsecuritylevel\">Publisher Automation Security Level\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fpublisher.application.automationsecurity\">Microsoft Learn: Application.AutomationSecurity property (Publisher)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eca7690169\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Microsoft Publisher blocks macros in files obtained from untrusted internet sources. The Office Administrative Templates define it as a \u003Ccode>REG_DWORD\u003C\u002Fcode>: \u003Ccode>1\u003C\u002Fcode> enables the block, while \u003Ccode>0\u003C\u002Fcode> disables this policy-enforced block.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\publisher\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-pub16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-66bb6be004\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\access\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-64f507eb90\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\excel\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-158275d9f1\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\infopath\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-89e9d057e1\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\outlook\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-602db0eca1\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\powerpoint\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9d0a08cdd6\">Restrict Apps from FPRPC Fallback\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Microsoft 365 apps may fall back to the legacy FrontPage Server Extensions Remote Procedure Call (FPRPC) protocol when opening files.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\fileio\\blockwecfallback = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-blockwecfallback\">Restrict Apps from FPRPC Fallback\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbaseline-security-mode\u002Fblock-server-extensions-protocol-file-opens?view=o365-worldwide\">Microsoft Learn: Block FrontPage Server Extensions Remote Procedure Call (FPRPC) for file opens\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5150e5adbb\">Disable all Trust Bar notifications for security issues\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls whether the Message Bar reports potentially unsafe features or content that Office has detected or automatically blocked. Examples include macros, ActiveX controls, add-ins, and external data connections.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\trustcenter\\trustbar = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disablealltrustbarnotificationsfor\">Disable all Trust Bar notifications for security issues\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Foffice\u002Fsecurity-privacy\u002Fturn-on-or-off-security-alerts-and-policy-tips-in-the-message-bar-for-office\">Microsoft Support: Turn on or off security alerts and Policy Tips in the Message Bar for Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cf8f5cfd08\">Allow scripts in one-off Outlook forms\u003C\u002Fh3>\n\u003Cp>This user-scoped Outlook policy controls whether scripts may run in one-off Outlook forms. A one-off form stores its form definition—including its layout and any VBScript code—inside an individual Outlook item. The item therefore does not rely solely on a separately published form in a forms library.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\enableoneoffformscripts = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-enablescriptsinoneoffforms\">Allow scripts in one-off Outlook forms\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9ce95e0d6a\">Disable Smart Document's use of manifests\u003C\u002Fh3>\n\u003Cp>This user-scoped policy controls whether Word and Excel can load XML expansion pack manifest files for Smart Documents.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\common\\smart tag\\neverloadmanifests = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disablesmartdocumentsuseofmanifests\">Disable Smart Document's use of manifests\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fexcel.xmlnamespaces.installmanifest\">Microsoft Learn: XmlNamespaces.InstallManifest method (Excel)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c923c9f83c\">Encryption type for password protected Office 97-2003 files\u003C\u002Fh3>\n\u003Cp>This policy-backed registry value specifies the cryptographic provider, encryption algorithm, and key length that Excel, PowerPoint, and Word use when encrypting password-protected files in the binary Office 97-2003 formats.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\security\\defaultencryption12 = Microsoft (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-encryptiontypeforpasswordprotectedoffice972003\">Encryption type for password protected Office 97-2003 files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-abd2b0a727\">Allow Basic Authentication prompts from network proxies\u003C\u002Fh3>\n\u003Cp>This per-user policy controls whether Office applications accept sign-in prompts when a network proxy requests Basic Authentication.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\identity\\basicauthproxybehavior = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-basicauthproxybehavior\">Allow Basic Authentication prompts from network proxies\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Fbasic-authentication-prompts-blocked\">Microsoft Learn: Basic authentication sign-in prompts are blocked by default in Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-595bd3af0a\">Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls additional path checks for library references in VBA projects. References to type libraries (\u003Ccode>*.olb\u003C\u002Fcode>, \u003Ccode>*.tlb\u003C\u002Fcode>, \u003Ccode>*.dll\u003C\u002Fcode>), executable files (\u003Ccode>*.exe\u003C\u002Fcode>), and ActiveX controls (\u003Ccode>*.ocx\u003C\u002Fcode>) can be affected.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\vba\\security\\disablestrictvbarefssecurity = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-disablestrictvbarefssecuritypolicy\">Disable additional security checks on VBA library references that may refer to unsafe locations on the local machine\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6a41953db3\">Allow VBA to load typelib references by path from untrusted intranet locations\u003C\u002Fh3>\n\u003Cp>This per-user Office policy controls whether Visual Basic for Applications can load type libraries and other project references through a path stored in the VBA project when that path points to an untrusted intranet location.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\vba\\security\\allowvbaintranetreferences = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-allowvbaintranetrefs\">Allow VBA to load typelib references by path from untrusted intranet locations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Flanguage\u002Freference\u002Fuser-interface-help\u002Freferences-dialog-box\">Microsoft Learn: References dialog box\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-978b4786ae\">Scan encrypted macros in PowerPoint Open XML presentations\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether encrypted VBA macros in PowerPoint Open XML presentations must be scanned by antivirus software before they are loaded.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\powerpointbypassencryptedmacroscan = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-determinewhethertoforceencryptedppt\">Scan encrypted macros in PowerPoint Open XML presentations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6d0faa6050\">Enable RPC encryption\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls RPC encryption for communication between Outlook 2016 and Microsoft Exchange. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value. A value of \u003Ccode>1\u003C\u002Fcode> makes Outlook use RPC security encryption for applicable Exchange connections and enforces the setting independently of the corresponding Outlook profile option.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\rpc\\enablerpcencryption = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-enablerpcencryption\">Enable RPC encryption\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-64540b2281\">Scan encrypted macros in Excel Open XML workbooks\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether Excel submits encrypted VBA macros in encrypted or rights-protected Open XML workbooks to compatible antivirus software before loading them.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\excelbypassencryptedmacroscan = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-determinewhethertoforceencryptedexcel\">Scan encrypted macros in Excel Open XML workbooks\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a66ac94d70\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Microsoft Visio can run VBA macros in files that Windows or Office identifies as originating from the internet. When blocking is enforced, Visio does not execute the affected macros. A less restrictive Trust Center setting, including the general option to enable all macros, does not override the policy.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\visio\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-visio16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d71595805f\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether Microsoft Visio can use Trusted Locations on a network. It does not define a Trusted Location itself; it determines whether Visio accepts network paths that have been designated as trusted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\visio\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-visio16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations\">Microsoft Learn: Trusted Locations for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d9a3cb4e01\">Remove file extensions blocked as Level 1\u003C\u002Fh3>\n\u003Cp>This string value (\u003Ccode>REG_SZ\u003C\u002Fcode>) specifies the file name extensions that classic Outlook no longer treats as Level 1 attachments. Multiple extensions are represented as a semicolon-separated list.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\fileextensionsremovelevel1 = ; (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-level1removefilepolicy\">Remove file extensions blocked as Level 1\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information for administrators about e-mail security settings in Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bb0f87119c\">Signature Warning\u003C\u002Fh3>\n\u003Cp>This registry value controls how Outlook warns users when they open an email message that has an invalid digital signature. It is a per-user policy value of type \u003Ccode>REG_DWORD\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\warnaboutinvalid = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-signaturewarning\">Signature Warning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Signature Warning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-146456f80e\">Do not show AutoRepublish warning alert\u003C\u002Fh3>\n\u003Cp>This user policy controls whether Excel displays an alert before automatically republishing a workbook.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\options\\disableautorepublishwarning = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-donotshowautorepublishwarningalert\">Do not show AutoRepublish warning alert\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Fapi\u002Fexcel.publishobject.autorepublish\">Microsoft Learn: PublishObject.AutoRepublish property (Excel)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-75081770ce\">Disable UI extending from documents and templates\u003C\u002Fh3>\n\u003Cp>This user-scoped Office policy controls, separately for each listed application, whether the application loads user-interface customizations embedded in a document or template. Such customizations can provide additional Ribbon tabs, groups, buttons, or commands.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\toolbars\\word\\noextensibilitycustomizationfromdocument = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-noextensibilitycustomizationfromdocumentpolicy\">Disable UI extending from documents and templates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office\">Microsoft Learn: Plan an upgrade from older versions of Office to Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e9cbd5b21c\">Set document behavior if file validation fails\u003C\u002Fh3>\n\u003Cp>This user policy controls how Microsoft Word handles a document that fails Office File Validation. File Validation checks the structure of supported file formats for irregularities that can result from file corruption or deliberately manipulated content. For Word, Microsoft specifically identifies the legacy Word 97–2003 \u003Ccode>.doc\u003C\u002Fcode> and \u003Ccode>.dot\u003C\u002Fcode> formats as formats that can produce file-validation errors.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\filevalidation\\openinprotectedview = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-setdocumentbehavioriffilevalidationfails\">Set document behavior if file validation fails\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fend-of-support\u002Fplan-upgrade-older-versions-office#review-new-policy-settings-for-group-policy\">Microsoft Learn: Office policy settings and the Office 16.0 registry branch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3b0e5164d2\">Turn off file validation\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls Office File Validation in Microsoft Word. Before Word opens a binary Word 97–2003 document, particularly a \u003Ccode>.doc\u003C\u002Fcode> or \u003Ccode>.dot\u003C\u002Fcode> file, file validation can compare the document’s internal structure with the rules defined for that file format.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\filevalidation\\enableonload = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-turnofffilevalidation\">Turn off file validation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecurityadvisories\u002F2011\u002F2501584\">Microsoft Learn: Microsoft Security Advisory 2501584 – Office File Validation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c288f95178\">Block macros from running in Office files from the internet\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Microsoft Word blocks VBA macros in files identified as originating from the internet. Such files commonly include browser downloads and email attachments carrying Mark of the Web (MOTW). Files opened from a network share can also be affected when Windows classifies the location in the Internet zone rather than as Local intranet or a Trusted site.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-blockmacroexecutionfrominternet\">Block macros from running in Office files from the internet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Finternet-macros-blocked\">Microsoft Learn: Macros from the internet are blocked by default in Office\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.ncsc.gov.uk\u002Fguidance\u002Fmacro-security-for-microsoft-office\">NCSC UK Device Security Guidance\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e39e441176\">Allow Trusted Locations on the network\u003C\u002Fh3>\n\u003Cp>This per-user Word policy controls whether network paths can function as Trusted Locations. When the policy is enabled, Word can recognize network locations defined either by policy or by the user as trusted.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\trusted locations\\allownetworklocations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-allowtrustedlocationsonthenetwork\">Allow Trusted Locations on the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-locations#allow-trusted-locations-on-the-network-policy\">Microsoft Learn: Trusted Locations for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-da772be3fe\">Scan encrypted macros in Word Open XML documents\u003C\u002Fh3>\n\u003Cp>This per-user registry value determines whether Word requires encrypted VBA macros in Word Open XML documents to be scanned by antivirus software before they are loaded. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value with the following supported data:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\wordbypassencryptedmacroscan = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-determinewhethertoforceencryptedword\">Scan encrypted macros in Word Open XML documents\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-59988d3efd\">Retrieving CRLs (Certificate Revocation Lists)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>usecrlchasing\u003C\u002Fcode> value controls how Outlook retrieves Certificate Revocation Lists (CRLs) when checking the validity of a certificate. A CRL identifies certificates that the issuing certification authority has revoked before their scheduled expiration.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\usecrlchasing = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-retrievingcrlscertificaterevocationlists\">Retrieving CRLs (Certificate Revocation Lists)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6b27b29c71\">Configure Outlook object model prompt When accessing the Formula property of a UserProperty object\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls how the Object Model Guard in classic Outlook responds when untrusted code accesses the protected \u003Ccode>Formula\u003C\u002Fcode> property of a \u003Ccode>UserProperty\u003C\u002Fcode> object. The property contains the formula associated with a custom Outlook property and can be used by combination or formula fields in custom forms. Because such formulas can reference address-information fields, Outlook treats access to this property as security-sensitive.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomformulaaccess = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oomformula\">Configure Outlook object model prompt When accessing the Formula property of a UserProperty object\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information about email security settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-56e3a3c0f5\">blockcontentexecutionfrominternet\u003C\u002Fh3>\n\u003Cp>Description to follow.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\...\\Security\\blockcontentexecutionfrominternet = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-df41739b92\">Set document behavior if file validation fails\u003C\u002Fh3>\n\u003Cp>This user-scoped PowerPoint policy controls what happens to presentations that fail Office File Validation. File validation examines supported legacy PowerPoint formats for structural deviations from the expected file format. A validation failure can indicate a deliberately malformed file, but it can also result from corruption or a defect in another application.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\filevalidation\\disableeditfrompv = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-setdocumentbehavioriffilevalidationfails\">Set document behavior if file validation fails\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d3a289cab3\">Set document behavior if file validation fails\u003C\u002Fh3>\n\u003Cp>This user-scoped PowerPoint policy controls what happens to presentations that fail Office File Validation. File validation examines supported legacy PowerPoint formats for structural deviations from the expected file format. A validation failure can indicate a deliberately malformed file, but it can also result from corruption or a defect in another application.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\filevalidation\\openinprotectedview = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-setdocumentbehavioriffilevalidationfails\">Set document behavior if file validation fails\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a221bc0f68\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fh3>\n\u003Cp>This user-scoped policy value determines whether Excel workbooks opened as Outlook attachments are opened in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\protectedview\\disableattachmentsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-turnoffprotectedviewforattachmentsopenedfromoutlook\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings – Protected View for Excel\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8b50c8fab3\">Do not open files in unsafe locations in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user Excel policy value controls whether files opened from locations classified as unsafe bypass Protected View. Its data type is \u003Ccode>REG_DWORD\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\protectedview\\disableunsafelocationsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-donotopenfilesinunsafelocationsinprotectedview\">Do not open files in unsafe locations in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3e32970185\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fh3>\n\u003Cp>This per-user policy value determines whether PowerPoint files opened as Outlook attachments start in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\protectedview\\disableattachmentsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-turnoffprotectedviewforattachmentsopenedfromoutlook\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d2e2f219ea\">Do not open files from the Internet zone in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether Excel opens files from the Internet zone in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\protectedview\\disableinternetfilesinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-donotopenfilesfromtheinternetzoneinprotectedview\">Do not open files from the Internet zone in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1074c12357\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user registry policy value determines whether PowerPoint verifies an application add-in’s digital signature before loading it. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value: \u003Ccode>1\u003C\u002Fcode> enforces the signature requirement, while \u003Ccode>0\u003C\u002Fcode> disables that policy requirement.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2f2625eb45\">Do not open files from the internet zone in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user policy value determines whether PowerPoint opens files associated with the Windows Internet zone in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\protectedview\\disableinternetfilesinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-donotopenfilesfromtheinternetzoneinprotectedview\">Do not open files from the internet zone in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-dff05d1b3b\">Do not open files in unsafe locations in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines whether PowerPoint opens files from locations classified as unsafe in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\powerpoint\\security\\protectedview\\disableunsafelocationsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ppt16-office-microsoft-policies-windows-l-donotopenfilesinunsafelocationsinprotectedview\">Do not open files in unsafe locations in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-82a2afdce2\">Configure Outlook object model prompt when accessing an address book\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls how Outlook responds when an untrusted program accesses an address book through the Outlook object model. It applies to address-book entry points protected by the Outlook Object Model Guard.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomaddressbookaccess = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oomaddressbook\">Configure Outlook object model prompt when accessing an address book\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Foutlook\u002Fhow-to\u002Fsecurity\u002Foutlook-object-model-security-warnings\">Microsoft Learn: Outlook Object Model Security Warnings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2481bf8d2d\">Configure Outlook object model prompt when reading address information\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls how the Object Model Guard in classic Outlook handles programmatic requests to read protected address information through the Outlook object model. Protected information includes sender, recipient, and email address data exposed through certain object-model properties and methods.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomaddressinformationaccess = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oomaddressaccess\">Configure Outlook object model prompt when reading address information\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cfb810d6ff\">Set Outlook object model custom actions execution prompt\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines how classic Outlook for Windows responds when a custom action is executed through the Outlook object model. Custom actions extend Outlook functionality and can, for example, be triggered by a rule.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomcustomaction = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-onexecutecustomactionoom\">Set Outlook object model custom actions execution prompt\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Foutlook\u002Femail-security\u002Femail-security-settings\">Microsoft Learn: Information about e-mail security settings in Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d61d88b2f1\">Configure Outlook object model prompt when sending mail\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls how the Outlook Object Model Guard in classic Outlook responds when an untrusted program attempts to send an item programmatically.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomsend = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oomsend\">Configure Outlook object model prompt when sending mail\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Foutlook\u002Fhow-to\u002Fsecurity\u002Foutlook-object-model-security-warnings\">Microsoft Learn: Outlook Object Model Security Warnings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-901bf3f059\">Configure Outlook object model prompt when executing Save As\u003C\u002Fh3>\n\u003Cp>This registry value controls how the Outlook object model responds when an untrusted program uses a protected \u003Ccode>SaveAs\u003C\u002Fcode> method to save an Outlook item to a file outside Outlook. It governs programmatic access and does not control an interactive Save As operation initiated by the user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\outlook\\security\\promptoomsaveas = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-outlk16-office-microsoft-policies-windows-l-oomsaveas\">Configure Outlook object model prompt when executing Save As\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice\u002Fvba\u002Foutlook\u002Fhow-to\u002Fsecurity\u002Fsecurity-behavior-of-the-outlook-object-model\">Microsoft Learn: Security Behavior of the Outlook Object Model\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bf8e45ad31\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls signature verification for application add-ins in Microsoft Project. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value. When set to \u003Ccode>1\u003C\u002Fcode>, Project checks an add-in's digital signature before loading it. Project disables the add-in if it is unsigned or if its signature does not come from a trusted publisher.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\ms project\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-proj16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6b0b9ab52b\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user policy determines whether Microsoft Publisher verifies an application add-in’s digital signature before loading the add-in.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\publisher\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-pub16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2d864b9006\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user policy value determines whether Excel verifies an application add-in's digital signature before loading the add-in.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6108969714\">Block Insecure Protocols\u003C\u002Fh3>\n\u003Cp>This registry value controls which network protocols supported Microsoft 365 apps for Windows can use when opening documents. Its data type is \u003Ccode>REG_DWORD\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\common\\fileio\\blockinsecureprotocols = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-office16-office-microsoft-policies-windows-l-blockinsecureprotocols\">Block Insecure Protocols\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbaseline-security-mode\u002Fblock-insecure-protocols-file-opens?view=o365-worldwide\">Microsoft Learn: Block insecure protocols for file opens in Microsoft 365 apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2f27f1dac6\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user Visio policy requires application add-ins to carry a valid digital signature from a publisher recognized as trusted before they can be loaded. The relevant code-signing certificate must be present in the Windows Trusted Publishers certificate store.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\visio\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-visio16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-adb483fdd9\">WEBSERVICE Function Notification Settings\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Excel runs worksheet formulas containing the \u003Ccode>WEBSERVICE\u003C\u002Fcode> function and whether it displays a security warning. \u003Ccode>WEBSERVICE\u003C\u002Fcode> issues an HTTP GET request to the Internet or intranet URL supplied by the formula and returns the web service response to the workbook.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\excel\\security\\webservicefunctionwarnings = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-excel16-office-microsoft-policies-windows-l-webcontentwarninglevel\">WEBSERVICE Function Notification Settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: Microsoft 365 Apps for Enterprise security baseline settings reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-103df21030\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fh3>\n\u003Cp>This per-user policy value determines whether Microsoft Word verifies an application add-in’s digital signature before loading the add-in.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\requireaddinsig = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-requirethatapplicationextensionsaresigned\">Require that application add-ins are signed by Trusted Publisher\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365-apps\u002Fsecurity\u002Ftrusted-publisher\">Microsoft Learn: Trusted publishers for Office files\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-39d297112e\">Do not open files from the internet zone in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>REG_DWORD\u003C\u002Fcode> value determines whether Microsoft Word opens files from the Internet zone in Protected View. The decision is based on zone information supplied by Windows, such as the origin marking attached to a downloaded file.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\protectedview\\disableinternetfilesinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-donotopenfilesfromtheinternetzoneinprotectedview\">Do not open files from the internet zone in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7044c47cbe\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fh3>\n\u003Cp>This per-user policy setting determines whether Word files opened as Outlook attachments initially open in Protected View.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\protectedview\\disableattachmentsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-turnoffprotectedviewforattachmentsopenedfromoutlook\">Turn off Protected View for attachments opened from Outlook\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fapp-management\u002Fconfiguration\u002Fmicrosoft-365-policies\">Microsoft Learn: Policies for Microsoft 365 Apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-075012c740\">Do not open files in unsafe locations in Protected View\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Microsoft Word opens files from locations classified as unsafe in Protected View. Despite the policy name, it does not prevent Word from opening those files.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\software\\policies\\microsoft\\office\\16.0\\word\\security\\protectedview\\disableunsafelocationsinpv = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#office-haertung\">Policies › Office hardening\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-word16-office-microsoft-policies-windows-l-donotopenfilesinunsafelocationsinprotectedview\">Do not open files in unsafe locations in Protected View\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fdevice-security\u002Fsecurity-baselines\u002Fref-v2-office-settings\">Microsoft Learn: List of settings for the Microsoft 365 Apps for Enterprise security baseline in Intune\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Microsoft 365 Apps for Enterprise 2512\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien\">Policy reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer\">Edge and Internet Explorer\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":16,"id":23,"text":24},"see-also","See also","\u002Fen\u002Fdocumentation",[27,47,59,67,115,135,151,167,191,207,223],{"titel":28,"pfad":29,"seiten":30},"Getting started","erste-schritte",[31,35,39,43],{"rel":32,"titel":33,"zu":34},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fwas-ist-setup-foundry",{"rel":36,"titel":37,"zu":38},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Finstallation",{"rel":40,"titel":41,"zu":42},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fschnellstart",{"rel":44,"titel":45,"zu":46},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fablauf",{"titel":48,"pfad":49,"seiten":50},"Setup","wizard",[51,55],{"rel":52,"titel":53,"zu":54},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fuebersicht",{"rel":56,"titel":57,"zu":58},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystemanforderungen",{"titel":60,"pfad":61,"seiten":62},"Setup in detail","einrichtung-detail",[63],{"rel":64,"titel":65,"zu":66},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Feinrichtung-detail\u002Fwindows-quelle",{"titel":68,"pfad":69,"seiten":70},"Foundry","konfiguration",[71,75,79,83,87,91,95,99,103,107,111],{"rel":72,"titel":73,"zu":74},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fprofile",{"rel":76,"titel":77,"zu":78},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fquellen",{"rel":80,"titel":81,"zu":82},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbenutzer",{"rel":84,"titel":85,"zu":86},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbilder",{"rel":88,"titel":89,"zu":90},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fwindows-bereinigen",{"rel":92,"titel":93,"zu":94},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fapps-entfernen",{"rel":96,"titel":97,"zu":98},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fauswaehlen",{"rel":100,"titel":101,"zu":102},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien",{"rel":104,"titel":105,"zu":106},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fpc-informationen",{"rel":108,"titel":109,"zu":110},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fnamensschema",{"rel":112,"titel":113,"zu":114},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Finstall-assist-gestalten",{"titel":116,"pfad":117,"seiten":118},"Installation","installationsmedien",[119,123,127,131],{"rel":120,"titel":121,"zu":122},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fusb-stick",{"rel":124,"titel":125,"zu":126},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fiso-erstellen",{"rel":128,"titel":129,"zu":130},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fvhd-erstellen",{"rel":132,"titel":133,"zu":134},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Finstall-assist",{"titel":136,"pfad":137,"seiten":138},"Machines","pruefmaschine",[139,143,147],{"rel":140,"titel":141,"zu":142},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fhyper-v-berechtigungen",{"rel":144,"titel":145,"zu":146},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fverwenden",{"rel":148,"titel":149,"zu":150},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Ferstellen",{"titel":152,"pfad":153,"seiten":154},"Editions","editionen",[155,159,163],{"rel":156,"titel":157,"zu":158},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditionen\u002Fvergleich",{"rel":160,"titel":161,"zu":162},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditionen\u002Flizenz-aktivieren",{"rel":164,"titel":165,"zu":166},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditionen\u002Faktivierungen-zuruecksetzen",{"titel":168,"pfad":169,"seiten":170},"Troubleshooting","fehler",[171,175,179,183,187],{"rel":172,"titel":173,"zu":174},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fusb",{"rel":176,"titel":177,"zu":178},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fiso",{"rel":180,"titel":181,"zu":182},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fhyperv",{"rel":184,"titel":185,"zu":186},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ffehler\u002Finstall-assist",{"rel":188,"titel":189,"zu":190},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fantwortdatei",{"titel":192,"pfad":193,"seiten":194},"Reference","referenz",[195,199,203],{"rel":196,"titel":197,"zu":198},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fbekannte-probleme",{"rel":200,"titel":201,"zu":202},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fdiagnose-und-protokolle",{"rel":204,"titel":205,"zu":206},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fglossar",{"titel":208,"pfad":209,"seiten":210},"Windows appendix","windows-anhang",[211,215,219],{"rel":212,"titel":213,"zu":214},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fdienste",{"rel":216,"titel":217,"zu":218},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Faufgaben",{"rel":220,"titel":221,"zu":222},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fapps",{"titel":224,"pfad":225,"seiten":226},"Policy appendix","richtlinien-anhang",[227,231,232,236,240,244,248,252,256,260,264,268,272],{"rel":228,"titel":229,"zu":230},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien",{"rel":6,"titel":9,"zu":7},{"rel":233,"titel":234,"zu":235},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer",{"rel":237,"titel":238,"zu":239},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen",{"rel":241,"titel":242,"zu":243},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-netzwerk-freigaben",{"rel":245,"titel":246,"zu":247},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie",{"rel":249,"titel":250,"zu":251},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung",{"rel":253,"titel":254,"zu":255},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-anmeldung-konten",{"rel":257,"titel":258,"zu":259},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien",{"rel":261,"titel":262,"zu":263},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-kernschutz",{"rel":265,"titel":266,"zu":267},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",{"rel":269,"titel":270,"zu":271},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update",{"rel":273,"titel":274,"zu":275},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-grundeinstellungen",{"titel":229,"zu":230},{"titel":234,"zu":235},1793199133783]