ADMX Viewer
Microsoft.Policies.InternetExplorer• Both

Download unsigned ActiveX controls

This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone. If you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run. If you disable this policy setting, users cannot run unsigned controls. If you do not configure this policy setting, users cannot run unsigned controls.

Policy Details

Policy Name
IZ_PolicyDownloadUnsignedActiveX_1
Registry Key
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
Supported On
At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
OMA-URI (CSP)
InternetExplorer/InternetZoneDownloadUnsignedActiveXControls
OS Build Version:10.0.16299
CSP Version:6.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Download unsigned ActiveX controls

Type: enum

Allowed Values
  • 0 Enable
  • 3 Disable
  • 1 Prompt