Prevent per-user installation of ActiveX controls

Information

This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis.
If you enable this policy setting, ActiveX controls cannot be installed on a per-user basis.
If you disable or do not configure this policy setting, ActiveX controls can be installed on a per-user basis.

Solution

Policy Path: Windows Components\Internet Explorer
Policy Setting Name: Prevent per-user installation of ActiveX controls

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-windows-10-v1809-and-windows-server/ba-p/701082/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-18(4)

Plugin: Windows

Control ID: d56cbea1de66fcb1b88303d54fcf86e3f28b45eb86b91d24080d88c6dbaadeb2