Antimalware programs against ActiveX controls must be run for the Local Machine zone.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-47003	DTBI426-IE11	SV-59869r1_rule	ECSC-1	Medium

Description
This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. If you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.If you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.If you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings..

Description

This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls, to check if they're safe to load on pages. If you enable this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.If you disable this policy setting, Internet Explorer always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.If you don't configure this policy setting, Internet Explorer won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings..

STIG	Date
Microsoft Internet Explorer 11 Security Technical Implementation Guide	2015-12-30

Details

Check Text ( None )
None

Fix Text (F-50721_fix)
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel->Security Page-> Local Machine Zone "Don't run antimalware programs against ActiveX controls" to Enabled" and select "Disable" in the drop-down box.