ADMX Viewer
Microsoft.Policies.InternetExplorer• Both

Run .NET Framework-reliant components not signed with Authenticode

This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link. If you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components. If you disable this policy setting, Internet Explorer will not execute unsigned managed components. If you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.

Policy Details

Policy Name
IZ_PolicyUnsignedFrameworkComponentsURLaction_8
Registry Key
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
Supported On
At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
OMA-URI (CSP)
InternetExplorer/LockedDownRestrictedSitesZoneAllowNETFrameworkReliantComponents
OS Build Version:10.0.15063
CSP Version:5.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Run .NET Framework-reliant components not signed with Authenticode

Type: enum

Allowed Values
  • 0 Enable
  • 3 Disable
  • 1 Prompt