Run .NET Framework-reliant components not signed with Authenticode - Restricted Sites Zone

Information

This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.
If you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.
If you disable this policy setting, Internet Explorer will not execute unsigned managed components.
If you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.

Solution

Policy Path: Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Policy Setting Name: Run .NET Framework-reliant components not signed with Authenticode

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-for-windows-10-version-21h2/ba-p/3042703

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(2)

Plugin: Windows

Control ID: fd60c48aac15722b414bdab697f73f5258980115102020333664d9f33420202f