ADMX Viewer
Microsoft.Policies.InternetExplorer• Both

Allow only approved domains to use ActiveX controls without prompt

This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites. If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.

Policy Details

Policy Name
IZ_PolicyOnlyAllowApprovedDomainsToUseActiveXWithoutPrompt_Both_Restricted
Registry Key
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
Supported On
At least Internet Explorer 8.0
OMA-URI (CSP)
InternetExplorer/RestrictedSitesZoneAllowOnlyApprovedDomainsToUseActiveXControls
OS Build Version:10.0.16299
CSP Version:6.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Only allow approved domains to use ActiveX controls without prompt

Type: enum

Allowed Values
  • 3 Enable
  • 0 Disable