| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-252910 | CAT I | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-252910 | CAT I | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | The version of Internet Explorer running on the sy... | - | |||
Check TextInternet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix TextFor Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-223015 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | The Internet Explorer warning about certificate ad... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-223017 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | The Download signed ActiveX controls property must... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-223018 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | The Download unsigned ActiveX controls property mu... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-223019 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | The Initialize and script ActiveX controls not mar... | - | |||
Check TextThe policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix TextSet the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||