DTBI1130-IE11 - VBScript must not be allowed to run in Internet Explorer (Restricted Sites zone) - Restricted Sites zone

Information

This policy setting allows the management of whether VBScript can be run on pages from the specified zone in Internet Explorer. By selecting 'Enable' in the drop-down box, VBScript can run without user intervention. By selecting 'Prompt' in the drop-down box, users are asked to choose whether to allow VBScript to run. By selecting 'Disable' in the drop-down box, VBScript is prevented from running. If this policy setting is not configured or disabled, VBScript will run without user intervention.

Solution

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone >> 'Allow VBScript to run in Internet Explorer' to 'Enabled' and select 'Disable' from the drop-down box.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IE11_V2R5_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(3), CAT|II, CCI|CCI-001169, Rule-ID|SV-223055r879629_rule, STIG-ID|DTBI1130-IE11, STIG-Legacy|SV-89851, STIG-Legacy|V-75171, Vuln-ID|V-223055

Plugin: Windows

Control ID: 509285a97def1cc2d6b0c787f545b3815172d097e949384ed4fa46b7cde6cdfc