ADMX File: inetres.admx

"Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt" Policies

• All Processes
• All Processes
• Internet Explorer Processes
• Internet Explorer Processes
• Process List
• Process List

Machine Policies

Windows Components\Internet Explorer Policies

• "Prevent ""Fix settings"" functionality"
• Add a specific list of search providers to the user's search provider list
• Configure new tab page default behavior
• Customize User Agent String
• Disable Automatic Install of Internet Explorer components
• Disable changing Automatic Configuration settings
• Disable changing connection settings
• Disable changing proxy settings
• Disable Periodic Check for Internet Explorer software updates
• Disable Per-User Installation of ActiveX Controls
• Disable showing the splash screen
• Disable software update shell notifications on program launch
• Do not allow users to enable or disable add-ons
• Enforce Full Screen Mode
• Make proxy settings per-machine (rather than per-user)
• Only use the ActiveX Installer Service for installation of ActiveX Controls
• Pop-up allow list
• Prevent Bypassing SmartScreen Filter Warnings
• Prevent Internet Explorer Search box from displaying
• Prevent participation in the Customer Experience Improvement Program
• Prevent performance of First Run Customize settings
• Restrict changing the default search provider
• Restrict search providers to a specific list of providers
• Security Zones: Do not allow users to add/delete sites
• Security Zones: Do not allow users to change policies
• Security Zones: Use only machine settings
• Set tab process growth
• Turn off ActiveX opt-in prompt
• Turn off Automatic Crash Recovery Prompt
• Turn off configuration of default behavior of new tab creation
• Turn off configuration of tabbed browsing pop-up behavior
• Turn off configuration of window reuse
• Turn off Crash Detection
• Turn off displaying the Internet Explorer Help Menu
• Turn off Favorites bar
• Turn off Managing Phishing filter
• Turn off Managing Pop-up Allow list
• Turn off managing Pop-up filter level
• Turn off Managing SmartScreen Filter
• Turn off page zooming functionality
• Turn off pop-up management
• Turn off Quick Tabs functionality
• Turn off Reopen Last Browsing Session
• Turn off suggestions for all user-installed providers
• Turn off tabbed browsing
• Turn off the activation of the quick pick menu
• Turn off the auto-complete feature for web addresses
• Turn off the Security Settings Check feature
• Turn on Compatibility Logging
• Turn on menu bar by default

Windows Components\Internet Explorer\Accelerators Policies

• Deploy default Accelerators
• Deploy non-default Accelerators
• Turn off Accelerators
• Use Policy Accelerators

Windows Components\Internet Explorer\Compatibility View Policies

• Include updated Web site lists from Microsoft
• Turn off Compatibility View
• Turn off Compatibility View button
• Turn on Internet Explorer 7 Standards Mode
• Turn on Internet Explorer Standards Mode for Local Intranet
• Use Policy List of Internet Explorer 7 sites

Windows Components\Internet Explorer\Corporate Settings\Code Download Policies

• Prevent setting of the code download path for each machine

Windows Components\Internet Explorer\Delete Browsing History Policies

• "Disable ""Configuring History"""
• "Turn off ""Delete Browsing History"" functionality"
• Configure Delete Browsing History on exit
• Prevent Deleting Cookies
• Prevent Deleting Favorites Site Data
• Prevent Deleting Form Data
• Prevent Deleting InPrivate Filtering data
• Prevent Deleting Passwords
• Prevent Deleting Temporary Internet Files
• Prevent Deleting Web sites that the User has Visited
• Prevent the deletion of temporary Internet files and cookies

Windows Components\Internet Explorer\InPrivate Policies

• Disable toolbars and extensions when InPrivate Browsing starts
• Do not collect InPrivate Filtering data
• InPrivate Filtering Threshold
• Turn off InPrivate Browsing
• Turn off InPrivate Filtering

Windows Components\Internet Explorer\Internet Control Panel Policies

• Disable the Advanced page
• Disable the Connections page
• Disable the Content page
• Disable the General page
• Disable the Privacy page
• Disable the Programs page
• Disable the Security page
• Prevent ignoring certificate errors
• Send internationalized domain names
• Use UTF-8 for mailto links

Windows Components\Internet Explorer\Internet Control Panel\Advanced Page Policies

• Allow active content from CDs to run on user machines
• Allow Install On Demand (except Internet Explorer)
• Allow Install On Demand (Internet Explorer)
• Allow software to run or install even if the signature is invalid
• Allow third-party browser extensions
• Automatically check for Internet Explorer updates
• Check for server certificate revocation
• Check for signatures on downloaded programs
• Do not allow resetting Internet Explorer settings
• Do not save encrypted pages to disk
• Empty Temporary Internet Files folder when browser is closed
• Play animations in web pages
• Play sounds in web pages
• Play videos in web pages
• Turn off ClearType
• Turn off Encryption Support
• Turn off Profile Assistant
• Turn on Caret Browsing support
• Use HTTP 1.1
• Use HTTP 1.1 through proxy connections

Windows Components\Internet Explorer\Internet Control Panel\Security Page Policies

• Internet Zone Template
• Intranet Sites: Include all local (intranet) sites not listed in other zones
• Intranet Sites: Include all network paths (UNCs)
• Intranet Sites: Include all sites that bypass the proxy server
• Intranet Zone Template
• Local Machine Zone Template
• Locked-Down Internet Zone Template
• Locked-Down Intranet Zone Template
• Locked-Down Local Machine Zone Template
• Locked-Down Restricted Sites Zone Template
• Locked-Down Trusted Sites Zone Template
• Restricted Sites Zone Template
• Site to Zone Assignment List
• Trusted Sites Zone Template
• Turn on automatic detection of the intranet
• Turn on Information bar notification for intranet content
• Turn on Warn about Certificate Address Mismatch

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Settings\AutoComplete Policies

• Turn off Windows Search AutoComplete

Windows Components\Internet Explorer\Internet Settings\Component Updates\Help Menu > About Internet Explorer Policies

• Prevent the configuration of cipher strength update information URLs

Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools Policies

• Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools
• Turn off configuring the update check interval (in days)

Windows Components\Internet Explorer\Security Features Policies

• Turn off Data Execution Prevention
• Turn off Data URI Support

Windows Components\Internet Explorer\Security Features\Add-on Management Policies

• Add-on List
• All Processes
• Deny all add-ons unless specifically allowed in the Add-on List
• Process List

Windows Components\Internet Explorer\Security Features\AJAX Policies

• Enable Native XMLHttpRequest Support
• Maximum number of connections per server (HTTP 1.0)
• Maximum number of connections per server (HTTP 1.1)
• Turn off Cross Document Messaging
• Turn off the XDomainRequest Object

Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction Policies

• Admin-approved behaviors
• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Consistent Mime Handling Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Information Bar Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone Policies

• Internet Zone Restricted Protocols
• Intranet Zone Restricted Protocols
• Local Machine Zone Restricted Protocols
• Restricted Sites Zone Restricted Protocols
• Trusted Sites Zone Restricted Protocols

Windows Components\Internet Explorer\Security Features\Object Caching Protection Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Restrict File Download Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Toolbars Policies

• Auto-hide the Toolbars
• Customize Command Labels
• Hide the Command Bar
• Hide the Status Bar
• Lock all Toolbars
• Set location of Stop and Refresh buttons
• Turn off Developer Tools
• Turn off toolbar upgrade tool
• Use large Icons for Command Buttons

Windows Components\RSS Feeds Policies

• Turn off addition and removal of feeds and Web Slices
• Turn off background sync for feeds and Web Slices
• Turn off downloading of enclosures
• Turn off feed and Web Slices discovery
• Turn off the feed list
• Turn on Basic feed authentication over HTTP

User Policies

Windows Components\Internet Explorer Policies

• "Prevent ""Fix settings"" functionality"
• Add a specific list of search providers to the user's search provider list
• Configure Media Explorer Bar
• Configure new tab page default behavior
• Configure Outlook Express
• Customize User Agent String
• Disable AutoComplete for forms
• Disable caching of Auto-Proxy scripts
• Disable changing accessibility settings
• Disable changing Advanced page settings
• Disable changing Automatic Configuration settings
• Disable changing Calendar and Contact settings
• Disable changing certificate settings
• Disable changing color settings
• Disable changing connection settings
• Disable changing default browser check
• Disable changing font settings
• Disable changing home page settings
• Disable changing language settings
• Disable changing link color settings
• Disable changing Messaging settings
• Disable changing Profile Assistant settings
• Disable changing proxy settings
• Disable changing ratings settings
• Disable changing secondary home page settings
• Disable changing Temporary Internet files settings
• Disable external branding of Internet Explorer
• Disable Import/Export Settings wizard
• Disable Internet Connection wizard
• Disable Per-User Installation of ActiveX Controls
• Disable the Reset Web Settings feature
• Display error message on proxy script download failure
• Do not allow users to enable or disable add-ons
• Enforce Full Screen Mode
• Identity Manager: Prevent users from using Identities
• Moving the menu bar above the navigation bar
• Only use the ActiveX Installer Service for installation of ActiveX Controls
• Pop-up allow list
• Prevent Bypassing SmartScreen Filter Warnings
• Prevent Internet Explorer Search box from displaying
• Prevent participation in the Customer Experience Improvement Program
• Prevent performance of First Run Customize settings
• Restrict changing the default search provider
• Restrict search providers to a specific list of providers
• Search: Disable Find Files via F3 within the browser
• Search: Disable Search Customization
• Set tab process growth
• Turn off ActiveX opt-in prompt
• Turn off Automatic Crash Recovery Prompt
• Turn off configuration of default behavior of new tab creation
• Turn off configuration of tabbed browsing pop-up behavior
• Turn off configuration of window reuse
• Turn off Crash Detection
• Turn off displaying the Internet Explorer Help Menu
• Turn off Favorites bar
• Turn off Managing Phishing filter
• Turn off Managing Pop-up Allow list
• Turn off managing Pop-up filter level
• Turn off Managing SmartScreen Filter
• Turn off page zooming functionality
• Turn off pop-up management
• Turn off Quick Tabs functionality
• Turn off Reopen Last Browsing Session
• Turn off suggestions for all user-installed providers
• Turn off Tab Grouping
• Turn off tabbed browsing
• Turn off the activation of the quick pick menu
• Turn off the auto-complete feature for web addresses
• Turn off the Security Settings Check feature
• Turn on Compatibility Logging
• Turn on menu bar by default
• Turn on Suggested Sites
• Turn on the auto-complete feature for user names and passwords on forms
• Use Automatic Detection for dial-up connections

Windows Components\Internet Explorer\Accelerators Policies

• Deploy default Accelerators
• Deploy non-default Accelerators
• Turn off Accelerators
• Use Policy Accelerators

Windows Components\Internet Explorer\Administrator Approved Controls Policies

• Audio/Video Player
• Carpoint
• DHTML Edit Control
• Investor
• Menu Controls
• Microsoft Agent
• Microsoft Chat
• Microsoft Scriptlet Component
• Microsoft Survey Control
• MSNBC
• NetShow File Transfer Control
• Shockwave Flash

Windows Components\Internet Explorer\Browser menus Policies

• Disable Context menu
• Disable Open in New Window menu option
• Disable Save this program to disk option
• File menu: Disable closing the browser and Explorer windows
• File menu: Disable New menu option
• File menu: Disable Open menu option
• File menu: Disable Save As Web Page Complete
• File menu: Disable Save As... menu option
• Help menu: Remove 'For Netscape Users' menu option
• Help menu: Remove 'Send Feedback' menu option
• Help menu: Remove 'Tip of the Day' menu option
• Help menu: Remove 'Tour' menu option
• Hide Favorites menu
• Tools menu: Disable Internet Options... menu option
• Turn off Print Menu
• View menu: Disable Full Screen menu option
• View menu: Disable Source menu option

Windows Components\Internet Explorer\Compatibility View Policies

• Include updated Web site lists from Microsoft
• Turn off Compatibility View
• Turn off Compatibility View button
• Turn on Internet Explorer 7 Standards Mode
• Turn on Internet Explorer Standards Mode for Local Intranet
• Use Policy List of Internet Explorer 7 sites

Windows Components\Internet Explorer\Delete Browsing History Policies

• "Disable ""Configuring History"""
• "Turn off ""Delete Browsing History"" functionality"
• Configure Delete Browsing History on exit
• Prevent Deleting Cookies
• Prevent Deleting Favorites Site Data
• Prevent Deleting Form Data
• Prevent Deleting InPrivate Filtering data
• Prevent Deleting Passwords
• Prevent Deleting Temporary Internet Files
• Prevent Deleting Web sites that the User has Visited
• Prevent the deletion of temporary Internet files and cookies

Windows Components\Internet Explorer\InPrivate Policies

• Disable toolbars and extensions when InPrivate Browsing starts
• Do not collect InPrivate Filtering data
• InPrivate Filtering Threshold
• Turn off InPrivate Browsing
• Turn off InPrivate Filtering

Windows Components\Internet Explorer\Internet Control Panel Policies

• Disable the Advanced page
• Disable the Connections page
• Disable the Content page
• Disable the General page
• Disable the Privacy page
• Disable the Programs page
• Disable the Security page
• Prevent ignoring certificate errors
• Send internationalized domain names
• Use UTF-8 for mailto links

Windows Components\Internet Explorer\Internet Control Panel\Advanced Page Policies

• Allow active content from CDs to run on user machines
• Allow Install On Demand (except Internet Explorer)
• Allow Install On Demand (Internet Explorer)
• Allow software to run or install even if the signature is invalid
• Allow third-party browser extensions
• Automatically check for Internet Explorer updates
• Check for server certificate revocation
• Check for signatures on downloaded programs
• Do not allow resetting Internet Explorer settings
• Do not save encrypted pages to disk
• Empty Temporary Internet Files folder when browser is closed
• Play animations in web pages
• Play sounds in web pages
• Play videos in web pages
• Turn off ClearType
• Turn off Encryption Support
• Turn off Profile Assistant
• Turn on Caret Browsing support
• Use HTTP 1.1
• Use HTTP 1.1 through proxy connections

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Browsing Policies

• Turn off configuring underline links
• Turn off friendly http error messages
• Turn off page transitions
• Turn off smooth scrolling
• Turn on script debugging
• Turn on the display of a notification about every script error

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Internet Connection Wizard Settings Policies

• Turn on the Internet Connection Wizard Auto Detect

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Multimedia Policies

• Allow the display of image download placeholders
• Turn off automatic image resizing
• Turn off picture display
• Turn off smart image dithering

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Printing Policies

• Allow the printing of background colors and images

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Searching Policies

• Prevent configuration of search from the Address bar

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Signup Settings Policies

• Turn on Automatic Signup

Windows Components\Internet Explorer\Internet Control Panel\Security Page Policies

• Internet Zone Template
• Intranet Sites: Include all local (intranet) sites not listed in other zones
• Intranet Sites: Include all network paths (UNCs)
• Intranet Sites: Include all sites that bypass the proxy server
• Intranet Zone Template
• Local Machine Zone Template
• Locked-Down Internet Zone Template
• Locked-Down Intranet Zone Template
• Locked-Down Local Machine Zone Template
• Locked-Down Restricted Sites Zone Template
• Locked-Down Trusted Sites Zone Template
• Restricted Sites Zone Template
• Site to Zone Assignment List
• Trusted Sites Zone Template
• Turn on automatic detection of the intranet
• Turn on Information bar notification for intranet content
• Turn on Warn about Certificate Address Mismatch

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone Policies

• "Allow cut, copy or paste operations from the clipboard via script"
• "Open files based on content, not file extension"
• Access data sources across domains
• Allow active content over restricted protocols to access my computer
• Allow active scripting
• Allow binary and script behaviors
• Allow drag and drop or copy and paste files
• Allow file downloads
• Allow font downloads
• Allow installation of desktop items
• Allow META REFRESH
• Allow scripting of Internet Explorer web browser control
• Allow script-initiated windows without size or position constraints
• Allow Scriptlets
• Allow status bar updates via script
• Allow video and animation on a Web page that uses a legacy media player
• Allow websites to open windows without address or status bars
• Allow websites to prompt for information using scripted windows
• Automatic prompting for ActiveX controls
• Automatic prompting for file downloads
• Disable .NET Framework Setup
• Display mixed content
• Do not prompt for client certificate selection when no certificates or only one certificate exists.
• Download signed ActiveX controls
• Download unsigned ActiveX controls
• Include local directory path when uploading files to a server
• Initialize and script ActiveX controls not marked as safe
• Java permissions
• Launching applications and files in an IFRAME
• Launching programs and unsafe files
• Logon options
• Loose XAML files
• Navigate windows and frames across different domains
• Only allow approved domains to use ActiveX controls without prompt
• Run .NET Framework-reliant components not signed with Authenticode
• Run .NET Framework-reliant components signed with Authenticode
• Run ActiveX controls and plugins
• Script ActiveX controls marked safe for scripting
• Scripting of Java applets
• Software channel permissions
• Submit non-encrypted form data
• Turn Off First-Run Opt-In
• Turn on Cross-Site Scripting (XSS) Filter
• Turn on Protected Mode
• Use Pop-up Blocker
• Use SmartScreen Filter
• Userdata persistence
• Web sites in less privileged Web content zones can navigate into this zone
• XAML browser applications
• XPS documents

Windows Components\Internet Explorer\Internet Settings\AutoComplete Policies

• Turn off inline AutoComplete in Windows Explorer
• Turn off Windows Search AutoComplete
• Turn on inline AutoComplete for Web addresses

Windows Components\Internet Explorer\Internet Settings\Display settings Policies

• Prevent users from choosing default text size

Windows Components\Internet Explorer\Internet Settings\Display settings\General Colors Policies

• Prevent the use of Windows colors
• Prevent users from configuring background color
• Prevent users from configuring text color

Windows Components\Internet Explorer\Internet Settings\Display settings\Link Colors Policies

• Prevent users from configuring the color of links that have already been clicked
• Prevent users from configuring the color of links that have not yet been clicked
• Prevent users from configuring the hover color
• Turn on the hover color option

Windows Components\Internet Explorer\Internet Settings\URL Encoding Policies

• Turn off sending URLs as UTF-8 (requires restart)

Windows Components\Internet Explorer\Offline Pages Policies

• Disable adding channels
• Disable adding schedules for offline pages
• Disable all scheduled offline pages
• Disable channel user interface completely
• Disable downloading of site subscription content
• Disable editing and creating of schedule groups
• Disable editing schedules for offline pages
• Disable offline page hit logging
• Disable removing channels
• Disable removing schedules for offline pages
• Subscription Limits

Windows Components\Internet Explorer\Persistence Behavior Policies

• File size limits for Internet zone
• File size limits for Intranet zone
• File size limits for Local Machine zone
• File size limits for Restricted Sites zone
• File size limits for Trusted Sites zone

Windows Components\Internet Explorer\Security Features Policies

• Turn off Data URI Support

Windows Components\Internet Explorer\Security Features\Add-on Management Policies

• Add-on List
• All Processes
• Deny all add-ons unless specifically allowed in the Add-on List
• Process List

Windows Components\Internet Explorer\Security Features\AJAX Policies

• Enable Native XMLHttpRequest Support
• Maximum number of connections per server (HTTP 1.0)
• Maximum number of connections per server (HTTP 1.1)
• Turn off Cross Document Messaging
• Turn off the XDomainRequest Object

Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction Policies

• Admin-approved behaviors
• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Consistent Mime Handling Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Information Bar Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Network Protocol Lockdown\Restricted Protocols Per Security Zone Policies

• Internet Zone Restricted Protocols
• Intranet Zone Restricted Protocols
• Local Machine Zone Restricted Protocols
• Restricted Sites Zone Restricted Protocols
• Trusted Sites Zone Restricted Protocols

Windows Components\Internet Explorer\Security Features\Object Caching Protection Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Restrict File Download Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions Policies

• All Processes
• Internet Explorer Processes
• Process List

Windows Components\Internet Explorer\Toolbars Policies

• Auto-hide the Toolbars
• Configure Toolbar Buttons
• Customize Command Labels
• Disable customizing browser toolbar buttons
• Disable customizing browser toolbars
• Hide the Command Bar
• Hide the Status Bar
• Lock all Toolbars
• Set location of Stop and Refresh buttons
• Turn off Developer Tools
• Turn off toolbar upgrade tool
• Use large Icons for Command Buttons

Windows Components\RSS Feeds Policies

• Turn off addition and removal of feeds and Web Slices
• Turn off background sync for feeds and Web Slices
• Turn off downloading of enclosures
• Turn off feed and Web Slices discovery
• Turn off the feed list
• Turn on Basic feed authentication over HTTP