Access Credential Manager as a trusted caller

800-53|AC-6(7)(b)

Access data sources across domains - Internet Zone

800-53|SC-18(3)

Access data sources across domains - Restricted Sites Zone

800-53|AC-7a.

Accounts: Limit local account use of blank passwords to console logon only

800-53|IA-5(1)

Allow Basic authentication - Client - AllowBasic

800-53|AC-17(4)

Allow Basic authentication - Service - AllowBasic

800-53|CM-7a.

Allow cut, copy or paste operations from the clipboard via script - Internet Zone

Allow cut, copy or paste operations from the clipboard via script - Restricted Sites Zone

Allow drag and drop or copy and paste files - Internet Zone

Allow drag and drop or copy and paste files - Restricted Sites Zone

800-53|IA-5c.

800-53|SC-28(1)

Allow fallback to SSL 3.0 (Internet Explorer)

800-53|SC-13

800-53|CM-6b.

Allow loading of XAML files - Internet Zone

Allow loading of XAML files - Restricted Sites Zone

800-53|IA-8(2)

Allow only approved domains to use ActiveX controls without prompt - Internet Zone

Allow only approved domains to use ActiveX controls without prompt - Restricted Sites Zone

Allow only approved domains to use the TDC ActiveX control - Internet Zone

Allow only approved domains to use the TDC ActiveX control - Restricted Sites Zone

Allow script-initiated windows without size or position constraints - Internet Zone

Allow script-initiated windows without size or position constraints - Restricted Sites Zone

Allow scripting of Internet Explorer WebBrowser controls - Internet Zone

Allow scripting of Internet Explorer WebBrowser controls - Restricted Sites Zone

Allow software to run or install even if the signature is invalid

800-53|SC-18(4)

Allow standby states (S1-S3) when sleeping (on battery)

Allow standby states (S1-S3) when sleeping (plugged in)

Allow unencrypted traffic - Client - AllowUnencryptedTraffic

800-53|AC-17(2)

Allow unencrypted traffic - Service - AllowUnencryptedTraffic

Allow updates to status bar via script - Internet Zone

Allow updates to status bar via script - Restricted Sites Zone

800-53|AC-6(10)

Allow VBScript to run in Internet Explorer - Internet Zone

Allow VBScript to run in Internet Explorer - Restricted Sites Zone

Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services

800-53|AC-18(3)

Always prompt for password upon connection

800-53|AC-17(6)

800-53|IA-2

800-53|SC-7(12)

Apply UAC restrictions to local accounts on network logons

800-53|AC-6(3)

800-53|AU-12c.

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings

Automatic prompting for file downloads - Internet Zone

Automatic prompting for file downloads - Restricted Sites Zone

800-53|SI-7(9)

800-53|IA-5(2)(a)

Check for signatures on downloaded programs

800-53|CM-5(3)

Configure Attack Surface Reduction rules - 3b576869-a4ec-4529-8536-b80a7769e899

800-53|SI-3c.2.

Configure Attack Surface Reduction rules - 5beb7efe-fd9a-4556-801d-275e5ffc04cc

Configure Attack Surface Reduction rules - 9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2

Configure Attack Surface Reduction rules - 56a863a9-875e-4185-98a7-b882c64b5ce5

Configure Attack Surface Reduction rules - 92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B

Configure Attack Surface Reduction rules - 7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c

Configure Attack Surface Reduction rules - 75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84

Configure Attack Surface Reduction rules - 26190899-1602-49e8-8b27-eb1d0a1ce869

Configure Attack Surface Reduction rules - b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4

Configure Attack Surface Reduction rules - be9ba2d9-53ea-4cdc-84e5-9b1eeee46550

Configure Attack Surface Reduction rules - c1db55ab-c21a-4637-bb3f-a12568109d35

Configure Attack Surface Reduction rules - d3e037e1-3eb8-44c8-a917-57927947596d

Configure Attack Surface Reduction rules - d4f940ab-401b-4efc-aadc-ad5f3c50688a

Configure Attack Surface Reduction rules - e6db77e5-3df2-4cf1-b95a-636979351e5b

Configure Attack Surface Reduction rules - ExploitGuard_ASR_Rules

Configure detection for potentially unwanted applications

800-53|CM-7(4)

Configure registry policy processing - NoBackgroundPolicy

Revision 1.2

Mar 8, 2023

Functional Update