Policy

Allow only approved domains to use ActiveX controls without prompt

This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites. If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.

Policy
Pack Microsoft Windows
Category Windows Components / Internet Explorer / Internet Control Panel / Security Page / Locked-Down Restricted Sites Zone
Policy ID a2671c5cb396
Internal name IZ_PolicyOnlyAllowApprovedDomainsToUseActiveXWithoutPrompt_Both_RestrictedLockdown

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4\120b
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4\120b

Policy notes

This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control. If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites. If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone.

Related policies

Access data sources across domainsAllow active scriptingAllow binary and script behaviorsAllow cut, copy or paste operations from the clipboard via scriptAllow drag and drop or copy and paste filesAllow file downloadsAllow font downloads