Detections
Analytics
DTBI805 - ActiveX opt-in prompt must be disallowed.
Information
This policy setting allows you to turn off the ActiveX opt-in prompt. The ActiveX opt-in prevents Web sites from loading any COM object without prior approval. If a page attempts to load a COM object that Internet Explorer has not used before, an Information bar will appear asking the user for approval. If you enable this policy setting, the ActiveX opt-in prompt will not appear. Internet Explorer does not ask the user for permission to load a control, and will load the ActiveX if it passes all other internal security checks. If you disable or do not configure this policy setting the ActiveX opt-in prompt will appear.Solution
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn off ActiveX opt-in prompt' to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Microsoft_IE9_V1R15_STIG.zip
Item Details
Audit Name: DISA STIG Microsoft Internet Explorer 9 v1r15
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, Rule-ID|SV-40764r1_rule, STIG-ID|DTBI805, Vuln-ID|V-30778
Plugin: Windows
Control ID: 8016debb43dbc613e09109bcb8421736023e32d905480b0de7dc6d581d69e338