| 6.3 Disable the automatic run of safe files in Safari | CIS Apple OSX 10.11 El Capitan L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Access data sources across domains - Restricted Sites Zone | MSCT Windows 10 1607 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Access data sources across domains - Restricted Sites Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow active scripting | MSCT Windows Server 1903 MS v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow META REFRESH | MSCT Windows 10 v1511 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow only approved domains to use the TDC ActiveX control - Restricted Sites Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow scripting of Internet Explorer WebBrowser controls - Internet Zone | MSCT Windows Server 1903 MS v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow scripting of Internet Explorer WebBrowser controls - Internet Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow scriptlets - Internet Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office - WOW6432Node | MSCT Office 365 ProPlus 1908 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 | MSCT Microsoft 365 Apps for Enterprise 2112 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT M365 Apps for enterprise 2312 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT Office 365 ProPlus 1908 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office | Microsoft 365 Apps for Enterprise 2306 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office | MSCT Office 365 ProPlus 1908 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office - WOW6432Node | MSCT Microsoft 365 Apps for Enterprise 2112 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office 16.0 | MSCT Microsoft 365 Apps for Enterprise 2206 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office 16.0 | Microsoft 365 Apps for Enterprise 2306 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - ActivationFilterOverride - D27CDB70-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT M365 Apps for enterprise 2312 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB6E-AE6D-11CF-96B8-444553540000 - office - 64-bit | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office - WOW6432Node | MSCT Microsoft 365 Apps for Enterprise 2112 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT Microsoft 365 Apps for Enterprise 2206 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT M365 Apps for enterprise 2312 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB6E-AE6D-11CF-96B8-444553540000 - Office 16.0 - WOW6432Node | MSCT Microsoft 365 Apps for Enterprise 2112 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB70-AE6D-11CF-96B8-444553540000 - Office | MSCT Office 365 ProPlus 1908 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB70-AE6D-11CF-96B8-444553540000 - Office 16.0 | MSCT Microsoft 365 Apps for Enterprise 2112 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Block Flash activation in Office documents - Compatibility Flags - D27CDB70-AE6D-11CF-96B8-444553540000 - Office16 | MSCT M365 Apps for enterprise 2312 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Download signed ActiveX controls - Internet Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Download signed ActiveX controls - Restricted Sites Zone | MSCT Windows Server 1903 DC v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Initialize and script ActiveX controls not marked as safe - Internet Zone | MSCT Windows Server 1903 MS v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Allow META refresh' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Allow previously unused ActiveX controls to run without prompt' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Allow scripting of Microsoft web browser control' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Download signed ActiveX controls' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Navigate windows and frames across different domains' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Run ActiveX controls and plug-ins' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Script ActiveX controls marked for safe scripting' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Disable 'Scripting of Java applets' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Zone - Enable 'Only allow approved domains to use ActiveX without prompt' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Access data sources across domains' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Allow META refresh' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Display video and animation on a web page that does not use external media player' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'File download' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Initialize and script ActiveX controls not marked as safe' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Navigate windows and frames across different domains' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Disable 'Scripting of Java applets' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Enable 'Enable XSS filter' | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Local intranet Zone - Set 'Active scripting' to Prompt | MS Security Advisory 2963983 Mitigation Settings audit | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Scripting of Java applets | MSCT Windows Server 1903 MS v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows | MSCT Windows 10 v1511 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
