| 1.1 Set 'Allow software to run or install even if the signature is invalid' to 'Disabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.2 Set 'Prevent Bypassing SmartScreen Filter Warnings' to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.3 Enable 'Prevent users from bypassing SmartScreen Filter's application reputation warnings about files that are not commonly downloaded' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.4 Configure 'Do not allow users to enable or disable add- ons' | ACCESS CONTROL |
| 1.5 Set 'Disable Save this program to disk option' to 'Enabled' | ACCESS CONTROL |
| 1.6 Set 'Select SmartScreen Filter mode for Internet Explorer 9' to 'Enabled:On' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.1 Set 'Disable Per- User Installation of ActiveX Controls' to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.2 Set 'Only use the ActiveX Installer Service for installation of ActiveX Controls' to 'Enabled' | CONFIGURATION MANAGEMENT |
| 2.3 Set 'Turn off ActiveX opt- in prompt' to 'Disabled' | CONFIGURATION MANAGEMENT |
| 2.4 Set 'Turn on ActiveX Filtering' to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.1 Configure 'Prevent Deleting Cookies' | ACCESS CONTROL |
| 3.2 Configure 'Prevent Deleting Temporary Internet Files' | ACCESS CONTROL |
| 3.3 Configure 'Turn off 'Delete Browsing History' functionality' | ACCESS CONTROL |
| 4.1 Configure 'Automatically check for Internet Explorer updates' | SYSTEM AND INFORMATION INTEGRITY |
| 5.1 Set 'Secure Protocol combinations' to 'Enabled:Only use TLS 1.0' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.2 Set 'Check for server certificate revocation' to 'Enabled' | IDENTIFICATION AND AUTHENTICATION |
| 5.3 Set 'Prevent ignoring certificate errors' to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.4 Set 'Disable changing certificate settings' to 'Enabled' | ACCESS CONTROL |
| 5.5 Set 'Check for signatures on downloaded programs' to 'Enabled' | CONFIGURATION MANAGEMENT |
| 6.1 Set 'Disable Browser Geolocation' to 'Enabled' | CONFIGURATION MANAGEMENT |
| 7.1 Set 'Restrict File Download' to 'Enabled' - explorer.exe | CONFIGURATION MANAGEMENT |
| 7.1 Set 'Restrict File Download' to 'Enabled' - iexplore.exe | CONFIGURATION MANAGEMENT |
| 7.1 Set 'Restrict File Download' to 'Enabled' - reserved | CONFIGURATION MANAGEMENT |
| 7.2 Set 'Notification bar' to 'Enabled' -(Reserved) | CONFIGURATION MANAGEMENT |
| 7.2 Set 'Notification bar' to 'Enabled' -explorer.exe | CONFIGURATION MANAGEMENT |
| 7.2 Set 'Notification bar' to 'Enabled' -iexplore.exe | CONFIGURATION MANAGEMENT |
| 7.3 Set 'Restrict ActiveX Install' to 'Enabled' - (Reserved) | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.3 Set 'Restrict ActiveX Install' to 'Enabled' - explorer.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.3 Set 'Restrict ActiveX Install' to 'Enabled'-iexplore.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.4 Set 'Consistent Mime Handling' to 'Enabled' - (Reserved) | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.4 Set 'Consistent Mime Handling' to 'Enabled' - explorer.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.4 Set 'Consistent Mime Handling' to 'Enabled' - iexplore.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.5 Set 'Protection From Zone Elevation' to 'Enabled' - (Reserved) | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.5 Set 'Protection From Zone Elevation' to 'Enabled' - explorer.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.5 Set 'Protection From Zone Elevation' to 'Enabled' - iexplore.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - (Reserved) | CONFIGURATION MANAGEMENT |
| 7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - explorer.exe | CONFIGURATION MANAGEMENT |
| 7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - iexplore.exe | CONFIGURATION MANAGEMENT |
| 7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - (Reserved) | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - explorer.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - iexplore.exe | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - (Reserved) | CONFIGURATION MANAGEMENT |
| 7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - explorer.exe | CONFIGURATION MANAGEMENT |
| 7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - iexplore.exe | CONFIGURATION MANAGEMENT |
| 8.1.1 Set 'Access data sources across domains' to 'Enabled:Disable' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.2 Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable' | CONFIGURATION MANAGEMENT |
| 8.1.3 Set 'Allow font downloads' to 'Enabled:Disable' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.4 Set 'Allow installation of desktop items' to 'Enabled:Disable' | CONFIGURATION MANAGEMENT |
| 8.1.5 Set 'Allow paste operations via script' to 'Enabled:Disable' | CONFIGURATION MANAGEMENT |
| 8.1.6 Set 'Allow script- initiated windows without size or position constraints' to 'Enabled:Disable' | CONFIGURATION MANAGEMENT |
