USNS MONTFORD POINT - Findings

V-223118 CAT II Internet Explorer Processes for restricting pop-up windows m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 36CA00607B70C3C1A18691A42A9849591FEED68F ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Scripted Window Security Restrictions -> 'Internet Explorer Processes' to 'Enabled'.

V-223119 CAT II .NET Framework-reliant components not signed with Authentico...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DDC81C4B584B69AD8EF8B280A4EE4F2253A369F3 ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components not signed with Authenticode' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2004" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled', and select 'Disable' from the drop-down box.

V-223120 CAT II .NET Framework-reliant components signed with Authenticode m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C004BF304DD1BBA39BD89F902D4DEB4AE8EFB835 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components signed with Authenticode' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2001" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run .NET Framework-reliant components signed with Authenticode' to 'Enabled', and select 'Disable' from the drop-down box.

V-223121 CAT II Scripting of Java applets must be disallowed (Restricted Sit...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E0DC6A0F19886BF6820260A688682A762A61877C ~~~~~ 'Scripting of Java applets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1402 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Scripting of Java applets' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1402" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Scripting of Java applets' to 'Enabled', and select 'Disable' from the drop-down box.

V-223122 CAT II AutoComplete feature for forms must be disallowed.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\d.admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\montford.exchange UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B ~~~~~ 'Disable AutoComplete for forms' is Enabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: Use FormSuggest Value: no Type: REG_SZ Comments

Check Text

The policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Disable AutoComplete for forms' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "Use FormSuggest" is REG_SZ = no, this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Disable AutoComplete for forms' to 'Enabled'.

V-223123 CAT II Crash Detection management must be enforced.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9A946C443A5E08A6076A444AF48AB04BE10A9D91 ~~~~~ 'Turn off Crash Detection' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Restrictions Value Name: NoCrashDetection Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn off Crash Detection' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key:HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions Criteria: If the value "NoCrashDetection" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn off Crash Detection' to 'Enabled'.

V-223124 CAT II Turn on the auto-complete feature for user names and passwor...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\d.admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\montford.exchange UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89108\Scan.Admin UserSID: S-1-5-21-4163428051-2768110797-3591193048-1016 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 Username: MONT-SW-89134\dod_admin UserSID: S-1-5-21-4004422625-1934610219-1178763574-1001 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE ~~~~~ 'Turn on the auto-complete feature for user names and passwords on forms' is Disabled Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest Passwords Value: no Type: REG_SZ Registry Path: HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: FormSuggest PW Ask Value: no Type: REG_SZ Comments

Check Text

The policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn on the auto-complete feature for user names and passwords on forms' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "FormSuggest Passwords" is REG_SZ = 'no', this is not a finding. AND Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "FormSuggest PW Ask" is REG_SZ = 'no', this is not a finding.

Fix Text

Set the policy value for User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> 'Turn on the auto-complete feature for user names and passwords on forms' to 'Disabled'.

V-223125 CAT II Managing SmartScreen Filter use must be enforced.

10 assets 8 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA725C1BF3B7BE2E1AD886F003D7679F424F48BE ~~~~~ 'Prevent Managing SmartScreen Filter' is Enabled: (On) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: EnabledV9 Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

If the system is on the SIPRNet, this requirement is NA. The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> "Prevent Managing SmartScreen Filter" must be "Enabled", and "On" selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter Criteria: If the value "EnabledV9" is "REG_DWORD = 1", this is not a finding.

Fix Text

If the system is on the SIPRNet, this requirement is NA. Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> "Prevent Managing SmartScreen Filter" to "Enabled", and select "On" from the drop-down box.

V-223126 CAT II Browser must retain history on exit.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B95BF97234BD16AD07C5B1D6E9E39C619C3B11E7 ~~~~~ 'Allow deleting browsing history on exit' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: ClearBrowsingHistoryOnExit Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Allow deleting browsing history on exit' must be 'Disabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy Criteria: If the value "ClearBrowsingHistoryOnExit" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Allow deleting browsing history on exit' to 'Disabled'.

V-223127 CAT II Deleting websites that the user has visited must be disallow...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 55E59242AA7F42CDE53C194E0A34FE8C38EC3D6B ~~~~~ 'Prevent Deleting Web sites that the User has Visited' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: CleanHistory Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Prevent Deleting Web sites that the User has Visited' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy Criteria: If the value "CleanHistory" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Prevent Deleting Web sites that the User has Visited' to 'Enabled'.

V-223128 CAT II InPrivate Browsing must be disallowed.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE1F5469F262717FD3AEEB9A8940AC6BA7093E4E ~~~~~ 'Turn off InPrivate Browsing' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy Value Name: EnableInPrivateBrowsing Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Privacy -> 'Turn off InPrivate Browsing' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy Criteria: If the value "EnableInPrivateBrowsing" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Privacy -> 'Turn off InPrivate Browsing' to 'Enabled'.

V-223129 CAT II Scripting of Internet Explorer WebBrowser control property m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B30B5B583180BC8FF5D8768D551560B04851BE58 ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow scripting of Internet Explorer WebBrowser controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1206" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow scripting of Internet Explorer WebBrowser controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223130 CAT II When uploading files to a server, the local directory path m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0734F0B8D7A9886A082BE07C2673E5E678A9B298 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Include local path when user is uploading files to a server' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "160A" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Include local path when user is uploading files to a server' to 'Enabled', and select 'Disable' from the drop-down box.

V-223131 CAT II Internet Explorer Processes for Notification Bars must be en...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 85685E265C6D0CB3EFC621BE3C019641B833510B ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' to 'Enabled'.

V-223132 CAT II Security Warning for unsafe files must be set to prompt (Int...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 09371CE8DC1B0D49D21C87AE0866BAF1BC64070F ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Prompt) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1806 Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Show security warning for potentially unsafe files' must be 'Enabled', and 'Prompt' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1806" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Show security warning for potentially unsafe files' to 'Enabled', and select 'Prompt' from the drop-down box.

V-223133 CAT II Internet Explorer Processes for Notification Bars must be en...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED55C9A1DB605B7B121981BBAE2246330DE4E99E ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' to 'Enabled'.

V-223134 CAT II ActiveX controls without prompt property must be used in app...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6FF0CFC0397576ED2980FA98161DD58B91A64A4 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> ' Allow only approved domains to use ActiveX controls without prompt' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "120b" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow only approved domains to use ActiveX controls without prompt' to 'Enabled', and select 'Enable' from the drop-down box.

V-223135 CAT II Internet Explorer Processes for Notification Bars must be en...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 343098D5B83F53B56DA1434D2FEC92507C0D09EC ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features-> Notification Bar-> 'Internet Explorer Processes' to 'Enabled'.

V-223136 CAT II Cross-Site Scripting Filter must be enforced (Internet zone)...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 07157C580754DC81B907FCC5A13F2F589DFDC0EA ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Turn on Cross-Site Scripting Filter' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1409" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Turn on Cross-Site Scripting Filter' to 'Enabled', and select 'Enable' from the drop-down box.

V-223137 CAT II Scripting of Internet Explorer WebBrowser Control must be di...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: E5F5B5594F4F08C2583DEEC14EF479BEB9C0A95D ~~~~~ 'Allow scripting of Internet Explorer WebBrowser controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1206 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow scripting of Internet Explorer WebBrowser controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1206" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow scripting of Internet Explorer WebBrowser controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223138 CAT II When uploading files to a server, the local directory path m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: EAD60F9AB92678C9E69433158D0B073705A3BB96 ~~~~~ 'Include local path when user is uploading files to a server' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 160A Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Include local path when user is uploading files to a server' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "160A" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Include local path when user is uploading files to a server' to 'Enabled', and select 'Disable' from the drop-down box.

V-223139 CAT II Security Warning for unsafe files must be disallowed (Restri...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BD3DBED475249039C6FCC62B9CDB217E697C3325 ~~~~~ 'Show security warning for potentially unsafe files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1806 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Show security warning for potentially unsafe files' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1806" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Show security warning for potentially unsafe files' to 'Enabled', and select 'Disable' from the drop-down box.

V-223140 CAT II ActiveX controls without prompt property must be used in app...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9767686022DE0CFA68C927F2A7678580B84BC33 ~~~~~ 'Allow only approved domains to use ActiveX controls without prompt' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120b Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow only approved domains to use ActiveX controls without prompt' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "120b" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow only approved domains to use ActiveX controls without prompt' to 'Enabled', and select 'Enable' from the drop-down box.

V-223141 CAT II Cross-Site Scripting Filter property must be enforced (Restr...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 35FF5E3B6EF5BE1AF429AAE920AA59FFC025B22C ~~~~~ 'Turn on Cross-Site Scripting Filter' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1409 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Turn on Cross-Site Scripting Filter' must be 'Enabled', and 'Enable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1409" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Turn on Cross-Site Scripting Filter' to 'Enabled', and select 'Enable' from the drop-down box.

V-223142 CAT II Internet Explorer Processes Restrict ActiveX Install must be...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 536CEF47C016E6991D28EB914858743B919D3D63 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: (Reserved) Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Criteria: If the value "(Reserved)" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' to 'Enabled'.

V-223143 CAT II Status bar updates via script must be disallowed (Internet z...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F6D7BA8800909F0BC2331DB586B2F5892EDAEB74 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Allow updates to status bar via script' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2103" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Allow updates to status bar via script' to 'Enabled', and select 'Disable' from the drop-down box.

V-223144 CAT II .NET Framework-reliant components not signed with Authentico...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F56D5CE7C23776878DF51BC130AD0A0FB7ADDEC ~~~~~ 'Run .NET Framework-reliant components not signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2004 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Run .NET Framework-reliant components not signed with Authenticode' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2004" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled', and select 'Disable' from the drop-down box.

V-223145 CAT II .NET Framework-reliant components signed with Authenticode m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 105DF9B0EB5480F7CA74F6DC1C843129EEE1BA40 ~~~~~ 'Run .NET Framework-reliant components signed with Authenticode' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2001 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Run .NET Framework-reliant components signed with Authenticode' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2001" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone 'Run .NET Framework-reliant components signed with Authenticode' to 'Enabled', and select 'Disable' from the drop-down box.

V-223146 CAT II Scriptlets must be disallowed (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0426F44E9CE5DDA7CD842DF5AD971762103608B6 ~~~~~ 'Allow Scriptlets' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1209 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Allow Scriptlets' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1209" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Allow Scriptlets' to 'Enabled', and select 'Disable' from the drop-down box.

V-223147 CAT II Status bar updates via script must be disallowed (Restricted...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5852C1FE13FDBD9B162304402F2F341C44B8E077 ~~~~~ 'Allow updates to status bar via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2103 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Allow updates to status bar via script' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2103" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Allow updates to status bar via script' to 'Enabled', and select 'Disable' from the drop-down box.

V-223148 CAT II When Enhanced Protected Mode is enabled, ActiveX controls mu...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5837EE0B81D74A753D7102EEFA6A7BF0AEEFEC55 ~~~~~ 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main Value Name: DisableEPMCompat Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Note: If McAfee ENS Web Control is being used, this is Not Applicable. The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Advanced Page 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main Criteria: If the value "DisableEPMCompat" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Advanced Page 'Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled' to 'Enabled'.

V-223149 CAT II Dragging of content from different domains across windows mu...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA9A696383357346E963CB41C062C95AED9009A ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Internet Zone 'Enable dragging of content from different domains across windows' must be 'Enabled', and 'Disabled' selected from the drop-down box. Procedure: Use the windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2709" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Internet Zone 'Enable dragging of content from different domains across windows' to 'Enabled', and select 'Disabled' from the drop-down box.

V-250540 CAT II Turn off Encryption Support must be enabled.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box.

V-250541 CAT II Allow Fallback to SSL 3.0 (Internet Explorer) must be disabl...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5609F2964B89DE1A06052A8CCE561393E1FC9608 ~~~~~ 'Allow fallback to SSL 3.0 (Internet Explorer)' is Enabled: (No Sites) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: EnableSSL3Fallback Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> "Allow fallback to SSL 3.0 (Internet Explorer)" must be "Enabled", and "No Sites" selected from the drop-down box. If "Allow fallback to SSL 3.0 (Internet Explorer)" is not "Enabled" or any other drop-down option is selected, this is a finding. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings. Criteria: If the value "EnableSSL3Fallback" is REG_DWORD=0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> "Allow fallback to SSL 3.0 (Internet Explorer)" to "Enabled", and select "No Sites" from the drop-down box.

V-223016 CAT III Check for publishers certificate revocation must be enforced...

10 assets 8 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\S.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\d.admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\montford.exchange UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 Username: MONTFORD-POINT\D.Admin UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104 ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6 ~~~~~ 'Check for publisher's certificate revocation' is Enabled Registry Path: HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Value Name: State Value: 0x00023c00 (146432) Type: REG_DWORD Comments

Check Text

If the system is on the SIPRNet, this requirement is NA. Open Internet Explorer. From the menu bar, select "Tools". From the "Tools" drop-down menu, select "Internet Options". From the "Internet Options" window, select the "Advanced" tab, from the "Advanced" tab window, scroll down to the "Security" category, and verify the "Check for publisher's certificate revocation" box is selected. Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Criteria If the value "State" is "REG_DWORD = 23C00", this is not a finding.

Fix Text

If the system is on the SIPRNet, this requirement is NA. Open Internet Explorer. From the menu bar, select "Tools". From the "Tools" drop-down menu, select "Internet Options". From the "Internet Options" window, select the "Advanced" tab from the "Advanced" tab window, scroll down to the "Security" category, and select the "Check for publisher's certificate revocation" box. Note: Manual entry in the registry key: HKCU\Software\Microsoft\Windows\Current Version\WinTrust\Trust Providers\Software Publishing for the value "State", set to "REG_DWORD = 23C00", may first be required.

V-223056 CAT III Internet Explorer Development Tools Must Be Disabled.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DD462570CE5FCDB351361CF6D31C334F497BFCCA ~~~~~ 'Turn off Developer Tools' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Value Name: Disabled Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Toolbars >> “Turn off Developer Tools” must be “Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKEY_LOCAL_Machine\SOFTWARE\Policies\Microsoft\Internet Explorer\IEDevTools Criteria: If the value "Disabled" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Toolbars >> “Turn off Developer Tools” to “Enabled”.

V-223078 CAT III Checking for server certificate revocation must be enforced.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8D3B7A012B4256B2999068A2C359701712B51A1 ~~~~~ 'Check for server certificate revocation' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: CertificateRevocation Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Check for server certificate revocation' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "CertificateRevocation" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> 'Check for server certificate revocation' to 'Enabled'.

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments