Allow only approved domains to use ActiveX controls without prompt - Restricted Sites Zone

Information

This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.
If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.
If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.

Solution

Policy Path: Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Policy Setting Name: Allow only approved domains to use ActiveX controls without prompt

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(3)

Plugin: Windows

Control ID: 9c2d08699c9c08fc1b7c2f9ab7320903fbcd583356f918fa6e6b96155b0abaaa