Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Internet Explorer 11 STIG Computer v2r6
Data collected on: 4/3/2025 10:39:50 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 4/2/2025 10:26:48 AM
Modified | 4/2/2025 10:27:06 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {CE4D1055-4614-4061-8276-D420E4F7BA13}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Windows Components/Internet Explorer

Policy | Setting | Comment
--- | --- | ---
Disable Internet Explorer 11 as a standalone browser | Enabled |
Notify that Internet Explorer 11 browser is disabled | Never
Policy | Setting | Comment
Prevent bypassing SmartScreen Filter warnings | Enabled |
Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet | Enabled |
Prevent managing SmartScreen Filter | Enabled |
Select SmartScreen Filter mode | On
Policy | Setting | Comment
Prevent per-user installation of ActiveX controls | Enabled |
Security Zones: Do not allow users to add/delete sites | Enabled |
Security Zones: Do not allow users to change policies | Enabled |
Security Zones: Use only machine settings | Enabled |
Turn off Crash Detection | Enabled |
Turn off the Security Settings Check feature | Disabled |

Windows Components/Internet Explorer/Delete Browsing History

Policy | Setting | Comment
--- | --- | ---
Allow deleting browsing history on exit | Disabled |
Disable "Configuring History" | Enabled |
Days to keep pages in History | 40
Policy | Setting | Comment
Prevent deleting websites that the user has visited | Enabled |

Windows Components/Internet Explorer/Internet Control Panel

Policy | Setting | Comment
--- | --- | ---
Prevent ignoring certificate errors | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Advanced Page

Policy | Setting | Comment
--- | --- | ---
Allow software to run or install even if the signature is invalid | Disabled |
Check for server certificate revocation | Enabled |
Check for signatures on downloaded programs | Enabled |
Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled | Enabled |
Turn off encryption support | Enabled |
Secure Protocol combinations | Only use TLS 1.2
Policy | Setting | Comment
Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | Enabled |
Turn on Enhanced Protected Mode | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page

Policy | Setting | Comment
--- | --- | ---
Intranet Sites: Include all network paths (UNCs) | Disabled |
Turn on certificate address mismatch warning | Enabled |

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone

Policy | Setting | Comment
--- | --- | ---
Access data sources across domains | Enabled |
Access data sources across domains | Disable
Policy | Setting | Comment
Allow cut, copy or paste operations from the clipboard via script | Enabled |
Allow paste operations via script | Disable
Policy | Setting | Comment
Allow drag and drop or copy and paste files | Enabled |
Allow drag and drop or copy and paste files | Disable
Policy | Setting | Comment
Allow loading of XAML files | Enabled |
XAML Files | Disable
Policy | Setting | Comment
Allow only approved domains to use ActiveX controls without prompt | Enabled |
Only allow approved domains to use ActiveX controls without prompt | Enable
Policy | Setting | Comment
Allow only approved domains to use the TDC ActiveX control | Enabled |
Only allow approved domains to use the TDC ActiveX control | Enable
Policy | Setting | Comment
Allow scripting of Internet Explorer WebBrowser controls | Enabled |
Internet Explorer web browser control | Disable
Policy | Setting | Comment
Allow script-initiated windows without size or position constraints | Enabled |
Allow script-initiated windows without size or position constraints | Disable
Policy | Setting | Comment
Allow scriptlets | Enabled |
Scriptlets | Disable
Policy | Setting | Comment
Allow updates to status bar via script | Enabled |
Status bar updates via script | Disable
Policy | Setting | Comment
Allow VBScript to run in Internet Explorer | Enabled |
Allow VBScript to run in Internet Explorer | Disable
Policy | Setting | Comment
Automatic prompting for file downloads | Enabled |
Automatic prompting for file downloads | Disable
Policy | Setting | Comment
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Download signed ActiveX controls | Enabled |
Download signed ActiveX controls | Disable
Policy | Setting | Comment
Download unsigned ActiveX controls | Enabled |
Download unsigned ActiveX controls | Disable
Policy | Setting | Comment
Enable dragging of content from different domains across windows | Enabled |
Enable dragging of content from different domains across windows | Disable
Policy | Setting | Comment
Enable dragging of content from different domains within a window | Enabled |
Enable dragging of content from different domains within a window | Disable
Policy | Setting | Comment
Include local path when user is uploading files to a server | Enabled |
Include local directory path when uploading files to a server | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java
Policy | Setting | Comment
Launching applications and files in an IFRAME | Enabled |
Launching applications and files in an IFRAME | Disable
Policy | Setting | Comment
Logon options | Enabled |
Logon options | Prompt for user name and password
Policy | Setting | Comment
Navigate windows and frames across different domains | Enabled |
Navigate windows and frames across different domains | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components not signed with Authenticode | Enabled |
Run .NET Framework-reliant components not signed with Authenticode | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components signed with Authenticode | Enabled |
Run .NET Framework-reliant components signed with Authenticode | Disable
Policy | Setting | Comment
Show security warning for potentially unsafe files | Enabled |
Launching programs and unsafe files | Prompt
Policy | Setting | Comment
Turn on Cross-Site Scripting Filter | Enabled |
Turn on Cross-Site Scripting (XSS) Filter | Enable
Policy | Setting | Comment
Turn on Protected Mode | Enabled |
Protected Mode | Enable
Policy | Setting | Comment
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable
Policy | Setting | Comment
Use Pop-up Blocker | Enabled |
Use Pop-up Blocker | Enable
Policy | Setting | Comment
Userdata persistence | Enabled |
Userdata persistence | Disable
Policy | Setting | Comment
Web sites in less privileged Web content zones can navigate into this zone | Enabled |
Web sites in less privileged Web content zones can navigate into this zone | Disable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | High safety

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Local Machine Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Intranet Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Local Machine Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Restricted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Locked-Down Trusted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Java permissions | Enabled |
Java permissions | Disable Java

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Restricted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Access data sources across domains | Enabled |
Access data sources across domains | Disable
Policy | Setting | Comment
Allow active scripting | Enabled |
Allow active scripting | Disable
Policy | Setting | Comment
Allow binary and script behaviors | Enabled |
Allow Binary and Script Behaviors | Disable
Policy | Setting | Comment
Allow cut, copy or paste operations from the clipboard via script | Enabled |
Allow paste operations via script | Disable
Policy | Setting | Comment
Allow drag and drop or copy and paste files | Enabled |
Allow drag and drop or copy and paste files | Disable
Policy | Setting | Comment
Allow file downloads | Enabled |
Allow file downloads | Disable
Policy | Setting | Comment
Allow loading of XAML files | Enabled |
XAML Files | Disable
Policy | Setting | Comment
Allow META REFRESH | Enabled |
Allow META REFRESH | Disable
Policy | Setting | Comment
Allow only approved domains to use ActiveX controls without prompt | Enabled |
Only allow approved domains to use ActiveX controls without prompt | Enable
Policy | Setting | Comment
Allow only approved domains to use the TDC ActiveX control | Enabled |
Only allow approved domains to use the TDC ActiveX control | Enable
Policy | Setting | Comment
Allow scripting of Internet Explorer WebBrowser controls | Enabled |
Internet Explorer web browser control | Disable
Policy | Setting | Comment
Allow script-initiated windows without size or position constraints | Enabled |
Allow script-initiated windows without size or position constraints | Disable
Policy | Setting | Comment
Allow scriptlets | Enabled |
Scriptlets | Disable
Policy | Setting | Comment
Allow updates to status bar via script | Enabled |
Status bar updates via script | Disable
Policy | Setting | Comment
Allow VBScript to run in Internet Explorer | Enabled |
Allow VBScript to run in Internet Explorer | Disable
Policy | Setting | Comment
Automatic prompting for file downloads | Enabled |
Automatic prompting for file downloads | Disable
Policy | Setting | Comment
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Download signed ActiveX controls | Enabled |
Download signed ActiveX controls | Disable
Policy | Setting | Comment
Download unsigned ActiveX controls | Enabled |
Download unsigned ActiveX controls | Disable
Policy | Setting | Comment
Enable dragging of content from different domains across windows | Enabled |
Enable dragging of content from different domains across windows | Disable
Policy | Setting | Comment
Enable dragging of content from different domains within a window | Enabled |
Enable dragging of content from different domains within a window | Disable
Policy | Setting | Comment
Include local path when user is uploading files to a server | Enabled |
Include local directory path when uploading files to a server | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | Disable Java
Policy | Setting | Comment
Launching applications and files in an IFRAME | Enabled |
Launching applications and files in an IFRAME | Disable
Policy | Setting | Comment
Logon options | Enabled |
Logon options | Anonymous logon
Policy | Setting | Comment
Navigate windows and frames across different domains | Enabled |
Navigate windows and frames across different domains | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components not signed with Authenticode | Enabled |
Run .NET Framework-reliant components not signed with Authenticode | Disable
Policy | Setting | Comment
Run .NET Framework-reliant components signed with Authenticode | Enabled |
Run .NET Framework-reliant components signed with Authenticode | Disable
Policy | Setting | Comment
Run ActiveX controls and plugins | Enabled |
Run ActiveX controls and plugins | Disable
Policy | Setting | Comment
Script ActiveX controls marked safe for scripting | Enabled |
Script ActiveX controls marked safe for scripting | Disable
Policy | Setting | Comment
Scripting of Java applets | Enabled |
Scripting of Java applets | Disable
Policy | Setting | Comment
Show security warning for potentially unsafe files | Enabled |
Launching programs and unsafe files | Disable
Policy | Setting | Comment
Turn on Cross-Site Scripting Filter | Enabled |
Turn on Cross-Site Scripting (XSS) Filter | Enable
Policy | Setting | Comment
Turn on Protected Mode | Enabled |
Protected Mode | Enable
Policy | Setting | Comment
Turn on SmartScreen Filter scan | Enabled |
Use SmartScreen Filter | Enable
Policy | Setting | Comment
Use Pop-up Blocker | Enabled |
Use Pop-up Blocker | Enable
Policy | Setting | Comment
Userdata persistence | Enabled |
Userdata persistence | Disable
Policy | Setting | Comment
Web sites in less privileged Web content zones can navigate into this zone | Enabled |
Web sites in less privileged Web content zones can navigate into this zone | Disable

Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone

Policy | Setting | Comment
--- | --- | ---
Don't run antimalware programs against ActiveX controls | Enabled |
Don't run antimalware programs against ActiveX controls | Disable
Policy | Setting | Comment
Initialize and script ActiveX controls not marked as safe | Enabled |
Initialize and script ActiveX controls not marked as safe | Disable
Policy | Setting | Comment
Java permissions | Enabled |
Java permissions | High safety

Windows Components/Internet Explorer/Privacy

Policy | Setting | Comment
--- | --- | ---
Turn off InPrivate Browsing | Enabled |

Windows Components/Internet Explorer/Security Features

Policy | Setting | Comment
--- | --- | ---
Allow fallback to SSL 3.0 (Internet Explorer) | Enabled |
Allow insecure fallback for: | No Sites

Windows Components/Internet Explorer/Security Features/Add-on Management

Policy | Setting | Comment
--- | --- | ---
Remove "Run this time" button for outdated ActiveX controls in Internet Explorer | Enabled |
Turn off blocking of outdated ActiveX controls for Internet Explorer | Disabled |

Windows Components/Internet Explorer/Security Features/Consistent Mime Handling

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Mime Sniffing Safety Feature

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/MK Protocol Security Restriction

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Notification bar

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Protection From Zone Elevation

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Restrict ActiveX Install

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Restrict File Download

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Security Features/Scripted Window Security Restrictions

Policy | Setting | Comment
--- | --- | ---
Internet Explorer Processes | Enabled |

Windows Components/Internet Explorer/Toolbars

Policy | Setting | Comment
--- | --- | ---
Turn off Developer Tools | Enabled |

User Configuration (Disabled)
No settings defined.