USNS MONTFORD POINT - Findings

V-223067 CAT II Userdata persistence must be disallowed (Restricted Sites zo...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 821D5CE4080FD100469891DFC13A3F5FF5D937AD ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Userdata persistence' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1606" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Userdata persistence' to 'Enabled', and select 'Disable' from the drop-down box

V-223068 CAT II Active scripting must be disallowed (Restricted Sites Zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A2142FA9616943F1F9400F6DE346C6A9C3E0947 ~~~~~ 'Allow active scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1400 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow active scripting' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1400" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow active scripting' to 'Enabled', and select 'Disable' from the drop-down box.

V-223069 CAT II Clipboard operations via script must be disallowed (Restrict...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3E37A8DD28527FDDF61A8DD1EC8E32C1CDF1F295 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow cut, copy or paste operations from the clipboard via script' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1407" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow cut, copy or paste operations from the clipboard via script' to 'Enabled', and select 'Disable' from the drop-down box.

V-223070 CAT II Logon options must be configured and enforced (Restricted Si...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6AB893E556BFA00AF83C99399D4C1CE2BF834807 ~~~~~ 'Logon options' is Enabled: (Anonymous logon) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1A00 Value: 0x00030000 (196608) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Logon options' must be 'Enabled', and 'Anonymous logon' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1A00" is REG_DWORD = 196608 (decimal), this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Logon options' to 'Enabled', and select 'Anonymous logon' from the drop-down box.

V-223071 CAT II Configuring History setting must be set to 40 days.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F530405A1FBE14B93A1A261105F84D9BE39C4E65 ~~~~~ 'Disable Configuring History' is Enabled: (40 Days) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Value Name: DaysToKeep Value: 0x00000028 (40) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Disable Configuring History' must be 'Enabled', and '40' entered in 'Days to keep pages in History'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel Criteria: If the value "History" is REG_DWORD = 1, this is not a finding. AND Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History Criteria: If the value "DaysToKeep" is REG_DWORD = 40 (decimal), this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Disable Configuring History' to 'Enabled', and enter '40' in 'Days to keep pages in History'.

V-223072 CAT II Internet Explorer must be set to disallow users to add/delet...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 89B4A472366085C2054A11E5CA4EADC477B10DCB ~~~~~ 'Security Zones: Do not allow users to add/delete sites' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_zones_map_edit Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Do not allow users to add/delete sites' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "Security_zones_map_edit" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Do not allow users to add/delete sites' to 'Enabled'.

V-223073 CAT II Internet Explorer must be configured to disallow users to ch...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6ABAE24FB49B74E8989DF32A7A88953797DB43A2 ~~~~~ 'Security Zones: Do not allow users to change policies' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_options_edit Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Do not allow users to change policies' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "Security_options_edit" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Do not allow users to change policies' to 'Enabled'.

V-223074 CAT II Internet Explorer must be configured to use machine settings...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6AF9CAB6B5D4E87C13D5FBA8B699116AA509C27 ~~~~~ 'Security Zones: Use only machine settings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: Security_HKLM_only Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Use only machine settings' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "Security_HKLM_only" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer 'Security Zones: Use only machine settings' to 'Enabled'.

V-223075 CAT II Security checking features must be enforced.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 45745CB1ECF449CAC7561E8DEC22BB4024357872 ~~~~~ 'Turn off the Security Settings Check feature' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security Value Name: DisableSecuritySettingsCheck Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn off the Security Settings Check feature' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Security Criteria: If the value "DisableSecuritySettingsCheck" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn off the Security Settings Check feature' to 'Disabled'.

V-223076 CAT II Software must be disallowed to run or install with invalid s...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A7A11BE34CB22F84BC8E8896199239DE3BAE45C1 ~~~~~ 'Allow software to run or install even if the signature is invalid' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: RunInvalidSignatures Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Note: Some legitimate software and controls may have an invalid signature. You should carefully test such software in isolation before it is allowed to be used on an organization's network. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "RunInvalidSignatures" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Allow software to run or install even if the signature is invalid' to 'Disabled'.

V-223077 CAT II The 64-bit tab processes, when running in Enhanced Protected...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2F4597CB410BB874BA3F6FB01C04C196E4A91F23 ~~~~~ 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Isolation64Bit Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Note: If McAfee ENS Web Control is being used, this is Not Applicable. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Advanced Page 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "Isolation64Bit" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Advanced Page 'Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows' to 'Enabled'.

V-223079 CAT II Checking for signatures on downloaded programs must be enfor...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BDE29D0601B5D65985F6B5DE8822DC123B816BC5 ~~~~~ 'Check for signatures on downloaded programs' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Download Value Name: CheckExeSignatures Value: yes Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Check for signatures on downloaded programs' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Download Criteria: If the value "CheckExeSignatures" is REG_SZ = yes, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Check for signatures on downloaded programs' to 'Enabled'.

V-223080 CAT II All network paths (UNCs) for Intranet sites must be disallow...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F99FBE3B0704AFF3F3209081208C01CD1922C73 ~~~~~ 'Intranet Sites: Include all network paths (UNCs)' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Value Name: UNCAsIntranet Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> 'Intranet Sites: Include all network paths (UNCs)' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap Criteria: If the value "UNCAsIntranet" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> 'Intranet Sites: Include all network paths (UNCs)' to 'Disabled'.

V-223081 CAT II Script-initiated windows without size or position constraint...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5DE6124F7E05A930014930A3828938E143258ECD ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow script-initiated windows without size or position constraints' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2102" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow script-initiated windows without size or position constraints' to 'Enabled', and select 'Disable' from the drop-down box.

V-223082 CAT II Script-initiated windows without size or position constraint...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C95640DE7B0B2EAA67CD3090997FE3C4CD3D2A64 ~~~~~ 'Allow script-initiated windows without size or position constraints' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2102 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow script-initiated windows without size or position constraints' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2102" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow script-initiated windows without size or position constraints' to 'Enabled', and select 'Disable' from the drop-down box.

V-223083 CAT II Scriptlets must be disallowed (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 422DC7863DEB568242835FC940D91F9C7EE949F6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow Scriptlets' must be 'Enabled', and 'Disable' from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1209" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow Scriptlets' to 'Enabled', and select 'Disable' from the drop-down box.

V-223084 CAT II Automatic prompting for file downloads must be disallowed (I...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7FB2FCBF0F014F3655FF565FD384A864F30A40A3 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Automatic prompting for file downloads' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2200" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Automatic prompting for file downloads' to 'Enabled', and select 'Disable' from the drop-down box.

V-223085 CAT II Java permissions must be disallowed (Local Machine zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 08314334E73A44F569517C999F0B98A5DCB98044 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Local Machine Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following keys: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Local Machine Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223086 CAT II Anti-Malware programs against ActiveX controls must be run f...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D1252998544FC083492B24908DFFE7D1C0A13B9A ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page ->Local Machine Zone 'Don't run antimalware programs against ActiveX controls' must be 'Enabled' and 'Disable' selected in the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0 Criteria: If the value "270C" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Local Machine Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

V-223087 CAT II Java permissions must be disallowed (Locked Down Local Machi...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE89F82A08F80D291F01102F68615B24B26AA014 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Local Machine Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following keys: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Local Machine Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223088 CAT II Java permissions must be disallowed (Locked Down Intranet zo...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 25ABE7DE5E193DD63287AAA928409009B7E9B1B4 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Intranet Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following keys: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1 Criteria: If the value" 1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Intranet Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223089 CAT II Java permissions must be disallowed (Locked Down Trusted Sit...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 97F58A6AA58B9ADB7BD1BB895AE2AA9C55DD41F8 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Trusted Sites Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following keys: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Trusted Sites Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223090 CAT II Java permissions must be disallowed (Locked Down Restricted ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 98883F9F4EE5FCE42358BAE03879942260EA91F7 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Restricted Sites Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following keys: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Locked-Down Restricted Sites Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223091 CAT II XAML files must be disallowed (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 63B0191D9DB0A37F55BF77D0B73169BE4E32C8E0 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow loading of XAML files' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2402" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow loading of XAML files' to 'Enabled', and select 'Disable' from the drop-down box.

V-223092 CAT II XAML files must be disallowed (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 320C6B89BFC7E14A1E1ADE4E63D63B88BA75BBE9 ~~~~~ 'Allow loading of XAML files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2402 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow loading of XAML files' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2402" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow loading of XAML files' to 'Enabled', and select 'Disable' from the drop-down box.

V-223093 CAT II Protected Mode must be enforced (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7E714837A4733647957D58323FD99262BA7C15D1 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Turn on Protected Mode' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2500" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Turn on Protected Mode' to 'Enabled', and select 'Enable' from the drop-down box.

V-223094 CAT II Protected Mode must be enforced (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EE1F3BC1C4A205F44CDE260DE7C0EBE0B148FBE2 ~~~~~ 'Turn on Protected Mode' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2500 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Turn on Protected Mode' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2500" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Turn on Protected Mode' to 'Enabled' and select 'Enable', from the drop-down box.

V-223095 CAT II Pop-up Blocker must be enforced (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AC4D33E67019BB199E5FB374518DF46455C3A8BD ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Use Pop-up Blocker' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1809" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Use Pop-up Blocker' to 'Enabled', and select 'Enable' from the drop-down box.

V-223096 CAT II Pop-up Blocker must be enforced (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A95A31BDD2C8FA50C06BA6A330CE8D758AEA03B7 ~~~~~ 'Use Pop-up Blocker' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1809 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Use Pop-up Blocker' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1809" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Use Pop-up Blocker' to 'Enabled', and select 'Enable' from the drop-down box.

V-223097 CAT II Websites in less privileged web content zones must be preven...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 37DBD4DE513B4AE709A2A4FB9A9287D65D4C2C08 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Web sites in less privileged Web content zones can navigate into this zone' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2101" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Web sites in less privileged Web content zones can navigate into this zone' to 'Enabled', and select 'Disable' from the drop-down box.

V-223098 CAT II Websites in less privileged web content zones must be preven...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C99F1AAE72BE5A67D94DF5591496DF946B6F6277 ~~~~~ 'Web sites in less privileged Web content zones can navigate into this zone' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2101 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Web sites in less privileged Web content zones can navigate into this zone' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2101" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Web sites in less privileged Web content zones can navigate into this zone' to 'Enabled', and select 'Disable' from the drop-down box.

V-223099 CAT II Allow binary and script behaviors must be disallowed (Restri...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B2DA896FF15BDB0F6B4AA990E0D68FA71F90F95 ~~~~~ 'Allow binary and script behaviors' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2000 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow binary and script behaviors' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2000" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow binary and script behaviors' to 'Enabled', and select 'Disable' from the drop-down box.

V-223100 CAT II Automatic prompting for file downloads must be disallowed (R...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 62C58B3038E65EFC0BE9EDC2F9E83063EDABD982 ~~~~~ 'Automatic prompting for file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2200 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Automatic prompting for file downloads' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2200" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Automatic prompting for file downloads' to 'Enabled', and select 'Disable' from the drop-down box.

V-223101 CAT II Internet Explorer Processes for MIME handling must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3A9834B6B41C5760DD0396C1040D15965C0DF96F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' to 'Enabled'.

V-223102 CAT II Internet Explorer Processes for MIME handling must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F0B2E0A602EA34DA26FF02969D4365B34A858FB4 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' to 'Enabled'.

V-223103 CAT II Internet Explorer Processes for MIME handling must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B43785BA140FC82058F20B4A3EA4CE5D4DEFD661 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Consistent Mime Handling -> 'Internet Explorer Processes' to 'Enabled'.

V-223104 CAT II Internet Explorer Processes for MIME sniffing must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DA6D1F2D5B61AE95DCD566A995696D766FF438BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' to 'Enabled'.

V-223105 CAT II Internet Explorer Processes for MIME sniffing must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4848A9C78B1B27A2172E65D227A0858D7D484A7E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' to 'Enabled'.

V-223106 CAT II Internet Explorer Processes for MIME sniffing must be enforc...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AA8ABF314A603A7E17CC745DC00308ED11D945F5 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Mime Sniffing Safety Feature -> 'Internet Explorer Processes' to 'Enabled'.

V-223107 CAT II Internet Explorer Processes for MK protocol must be enforced...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E922A7D57AD1B803F2D3CF6064F8EABEF8F12806 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' to 'Enabled'.

V-223108 CAT II Internet Explorer Processes for MK protocol must be enforced...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 54F1374453B553BB3C64FD8F296FAFD357CA38F8 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' to 'Enabled'.

V-223109 CAT II Internet Explorer Processes for MK protocol must be enforced...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C259EB9127BB3204938B3F0125C5D91CD8267E6E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> MK Protocol Security Restriction -> 'Internet Explorer Processes' to 'Enabled'.

V-223110 CAT II Internet Explorer Processes for Zone Elevation must be enfor...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7ABB24AE83FD79D4BD1562D670247550BB1F1D96 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' to 'Enabled'.

V-223111 CAT II Internet Explorer Processes for Zone Elevation must be enfor...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 006C6602D00187C3EEEBF9D3D869182611369869 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' to 'Enabled'.

V-223112 CAT II Internet Explorer Processes for Zone Elevation must be enfor...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4C23CF6288F6093FE69EE8283344733297BC38EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Protection From Zone Elevation -> 'Internet Explorer Processes' to 'Enabled'.

V-223113 CAT II Internet Explorer Processes for Restrict File Download must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 937623AC37707A8A9194B3AAA9230ED7B23DEBA3 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' to 'Enabled'.

V-223114 CAT II Internet Explorer Processes for Restrict File Download must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1C10376B7D28A446FD29F7E59BF708739CDC52C2 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' to 'Enabled'.

V-223115 CAT II Internet Explorer Processes for Restrict File Download must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 02AA15DC23E9D1A06C5BC15EB1FBD0BB684279BA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict File Download -> 'Internet Explorer Processes' to 'Enabled'.

V-223116 CAT II Internet Explorer Processes for restricting pop-up windows m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3E75EAF0E0CADDF3C92492D350BCBDE90DCCF97 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' to 'Enabled'.

V-223117 CAT II Internet Explorer Processes for restricting pop-up windows m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EF62E1C5C98B96A8A72E1BFC1F26AF74A0186AAD ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Criteria: If the value "explorer.exe is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' to 'Enabled'.

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments