Internet Explorer Processes - FEATURE_ZONE_ELEVATION - (Reserved)

Information

Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet Intranet Local Machine zone etc.). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone making the Local Machine security zone a prime target for malicious users. Zone Elevation also disables JavaScript navigation if there is no security context.

If you enable this policy setting any zone can be protected from zone elevation by Internet Explorer processes.

If you disable this policy setting no zone receives such protection for Internet Explorer processes.

If you do not configure this policy setting any zone can be protected from zone elevation by Internet Explorer processes.

Solution

Policy Path: Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
Policy Setting Name: Internet Explorer Processes

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-22h2-security-baseline/ba-p/3632520

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-3

Plugin: Windows

Control ID: 91c37c84024021a182449dbd552fe4918fa3746acb15cdc793866a0cbecbaffa