UCF STIG Viewer Logo

Internet Explorer Processes Restrict ActiveX Install (Reserved) property is properly set.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22171 DTBI900 SV-44647r1_rule ECSC-1 Medium
Description
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you do not configure this policy setting, the user’s preference will be used to determine whether to block ActiveX control installations for Internet Explorer processes.
STIG Date
Microsoft IE Version 7 2015-12-17

Details

Check Text ( C-42151r2_chk )
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> “Internet Explorer Processes” will be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL

Criteria: If the value (Reserved) is REG_SZ = 1, this is not a finding.
Fix Text (F-38103r2_fix)
The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> “Internet Explorer Processes” will be set to “Enabled”.

Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL
Criteria: Set the value (Reserved) to REG_SZ = 1.