| Allow binary and script behaviors | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Allow loading of XAML files - Internet Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow loading of XAML files - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow only approved domains to use the TDC ActiveX control - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Allow scriptlets - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Allow standby states (S1-S3) when sleeping (plugged in) | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Allow updates to status bar via script - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Allow VBScript to run in Internet Explorer - Internet Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Allow VBScript to run in Internet Explorer - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Audit Other Policy Change Events | MSCT Windows 11 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Other System Events | MSCT Windows 11 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit PNP Activity | MSCT Windows 11 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Special Logon | MSCT Windows 11 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Automatic prompting for file downloads - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Configure Attack Surface Reduction rules - c1db55ab-c21a-4637-bb3f-a12568109d35 | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Configure Solicited Remote Assistance - MaxTicketExpiryUnits | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Configure the 'Block at First Sight' feature | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Configure Windows Defender SmartScreen - EnableSmartScreen | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| dBase III / IV files | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Do not allow passwords to be saved | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Domain member: Digitally encrypt or sign secure channel data (always) | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Domain member: Digitally sign secure channel data (when possible) | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Download signed ActiveX controls - Internet Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Download signed ActiveX controls - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Enumerate administrator accounts on elevation | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Enumerate local users on domain-joined computers | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Hardened UNC Paths - \\*\NETLOGON | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Initialize and script ActiveX controls not marked as safe - Intranet Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Initialize and script ActiveX controls not marked as safe - Trusted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Interactive logon: Machine account lockout threshold | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Object Caching Protection - outlook.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Object Caching Protection - pptview.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Protect document metadata for rights managed Office Open XML Files | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Protection From Zone Elevation - msaccess.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Protection From Zone Elevation - mspub.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Protection From Zone Elevation - powerpnt.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Restrict ActiveX Install - groove.exe | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Restrict ActiveX Install - pptview.exe | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Restrict ActiveX Install - spdesign.exe | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Restrict ActiveX Install - winword.exe | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Restrict File Download - pptview.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Scripted Window Security Restrictions - onenote.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Scripted Window Security Restrictions - outlook.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Scripted Window Security Restrictions - spdesign.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Scripted Window Security Restrictions - winword.exe | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Set document behavior if file validation fails - disableeditfrompv - word | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Set document behavior if file validation fails - openinprotectedview - excel | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Turn off Protected View for attachments opened from Outlook - disableattachmentsinpv - excel | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Use Unicode format when dragging e-mail message to file system | MSCT Office 2016 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Word 2 and earlier binary documents and templates | MSCT Office 2016 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
