USNS MONTFORD POINT - Findings

Showing 50 of 1370 findings (filtered) View Documentation Status (90 tracked)

Vuln ID	Severity	Asset	STIG	Title	Doc Status
V-252910	CAT I	MONT-VSF-004	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl Scan Date: 2026-01-14T12:57:29.593425 Technology Area: Windows Operating System
V-252910	CAT I	MONT-VSF-003	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl Scan Date: 2026-01-14T12:57:31.028003 Technology Area: Windows Operating System
V-252910	CAT I	MONT-MB-002	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl Scan Date: 2026-01-14T12:57:32.457862 Technology Area: Windows Operating System
V-252910	CAT I	MONT-DP-001	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl Scan Date: 2026-01-14T12:57:34.785380 Technology Area: Windows Operating System
V-252910	CAT I	MONT-DC-003	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl Scan Date: 2026-01-14T12:57:36.769737 Technology Area: Windows Operating System
V-252910	CAT I	MONT-DB-002	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl Scan Date: 2026-01-14T12:57:38.608653 Technology Area: Windows Operating System
V-252910	CAT I	MONT-BE-002	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl Scan Date: 2026-01-14T12:57:39.956221 Technology Area: Windows Operating System
V-252910	CAT I	MONT-AP-002	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl Scan Date: 2026-01-14T12:57:42.261670 Technology Area: Windows Operating System
V-252910	CAT I	MONT-SW-89108	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl Scan Date: 2026-03-04T15:25:15.947087 Technology Area: Windows Operating System
V-252910	CAT I	MONT-SW-89134	Microsoft Internet Explorer 11 Security ...	The version of Internet Explorer running on the sy...	-
Check Text Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding. Fix Text For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user". Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl Scan Date: 2026-03-04T15:25:41.971891 Technology Area: Windows Operating System
V-223015	CAT II	MONT-VSF-004	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl Scan Date: 2026-01-14T12:57:29.593425 Technology Area: Windows Operating System
V-223015	CAT II	MONT-VSF-003	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl Scan Date: 2026-01-14T12:57:31.028003 Technology Area: Windows Operating System
V-223015	CAT II	MONT-MB-002	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl Scan Date: 2026-01-14T12:57:32.457862 Technology Area: Windows Operating System
V-223015	CAT II	MONT-DP-001	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl Scan Date: 2026-01-14T12:57:34.785380 Technology Area: Windows Operating System
V-223015	CAT II	MONT-DC-003	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl Scan Date: 2026-01-14T12:57:36.769737 Technology Area: Windows Operating System
V-223015	CAT II	MONT-DB-002	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl Scan Date: 2026-01-14T12:57:38.608653 Technology Area: Windows Operating System
V-223015	CAT II	MONT-BE-002	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl Scan Date: 2026-01-14T12:57:39.956221 Technology Area: Windows Operating System
V-223015	CAT II	MONT-AP-002	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl Scan Date: 2026-01-14T12:57:42.261670 Technology Area: Windows Operating System
V-223015	CAT II	MONT-SW-89108	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl Scan Date: 2026-03-04T15:25:15.947087 Technology Area: Windows Operating System
V-223015	CAT II	MONT-SW-89134	Microsoft Internet Explorer 11 Security ...	The Internet Explorer warning about certificate ad...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl Scan Date: 2026-03-04T15:25:41.971891 Technology Area: Windows Operating System
V-223017	CAT II	MONT-VSF-004	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl Scan Date: 2026-01-14T12:57:29.593425 Technology Area: Windows Operating System
V-223017	CAT II	MONT-VSF-003	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl Scan Date: 2026-01-14T12:57:31.028003 Technology Area: Windows Operating System
V-223017	CAT II	MONT-MB-002	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl Scan Date: 2026-01-14T12:57:32.457862 Technology Area: Windows Operating System
V-223017	CAT II	MONT-DP-001	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl Scan Date: 2026-01-14T12:57:34.785380 Technology Area: Windows Operating System
V-223017	CAT II	MONT-DC-003	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl Scan Date: 2026-01-14T12:57:36.769737 Technology Area: Windows Operating System
V-223017	CAT II	MONT-DB-002	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl Scan Date: 2026-01-14T12:57:38.608653 Technology Area: Windows Operating System
V-223017	CAT II	MONT-BE-002	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl Scan Date: 2026-01-14T12:57:39.956221 Technology Area: Windows Operating System
V-223017	CAT II	MONT-AP-002	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl Scan Date: 2026-01-14T12:57:42.261670 Technology Area: Windows Operating System
V-223017	CAT II	MONT-SW-89108	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl Scan Date: 2026-03-04T15:25:15.947087 Technology Area: Windows Operating System
V-223017	CAT II	MONT-SW-89134	Microsoft Internet Explorer 11 Security ...	The Download signed ActiveX controls property must...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl Scan Date: 2026-03-04T15:25:41.971891 Technology Area: Windows Operating System
V-223018	CAT II	MONT-VSF-004	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl Scan Date: 2026-01-14T12:57:29.593425 Technology Area: Windows Operating System
V-223018	CAT II	MONT-VSF-003	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl Scan Date: 2026-01-14T12:57:31.028003 Technology Area: Windows Operating System
V-223018	CAT II	MONT-MB-002	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl Scan Date: 2026-01-14T12:57:32.457862 Technology Area: Windows Operating System
V-223018	CAT II	MONT-DP-001	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl Scan Date: 2026-01-14T12:57:34.785380 Technology Area: Windows Operating System
V-223018	CAT II	MONT-DC-003	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl Scan Date: 2026-01-14T12:57:36.769737 Technology Area: Windows Operating System
V-223018	CAT II	MONT-DB-002	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl Scan Date: 2026-01-14T12:57:38.608653 Technology Area: Windows Operating System
V-223018	CAT II	MONT-BE-002	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl Scan Date: 2026-01-14T12:57:39.956221 Technology Area: Windows Operating System
V-223018	CAT II	MONT-AP-002	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl Scan Date: 2026-01-14T12:57:42.261670 Technology Area: Windows Operating System
V-223018	CAT II	MONT-SW-89108	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl Scan Date: 2026-03-04T15:25:15.947087 Technology Area: Windows Operating System
V-223018	CAT II	MONT-SW-89134	Microsoft Internet Explorer 11 Security ...	The Download unsigned ActiveX controls property mu...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl Scan Date: 2026-03-04T15:25:41.971891 Technology Area: Windows Operating System
V-223019	CAT II	MONT-VSF-004	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl Scan Date: 2026-01-14T12:57:29.593425 Technology Area: Windows Operating System
V-223019	CAT II	MONT-VSF-003	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl Scan Date: 2026-01-14T12:57:31.028003 Technology Area: Windows Operating System
V-223019	CAT II	MONT-MB-002	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl Scan Date: 2026-01-14T12:57:32.457862 Technology Area: Windows Operating System
V-223019	CAT II	MONT-DP-001	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl Scan Date: 2026-01-14T12:57:34.785380 Technology Area: Windows Operating System
V-223019	CAT II	MONT-DC-003	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl Scan Date: 2026-01-14T12:57:36.769737 Technology Area: Windows Operating System
V-223019	CAT II	MONT-DB-002	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl Scan Date: 2026-01-14T12:57:38.608653 Technology Area: Windows Operating System
V-223019	CAT II	MONT-BE-002	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl Scan Date: 2026-01-14T12:57:39.956221 Technology Area: Windows Operating System
V-223019	CAT II	MONT-AP-002	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl Scan Date: 2026-01-14T12:57:42.261670 Technology Area: Windows Operating System
V-223019	CAT II	MONT-SW-89108	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl Scan Date: 2026-03-04T15:25:15.947087 Technology Area: Windows Operating System
V-223019	CAT II	MONT-SW-89134	Microsoft Internet Explorer 11 Security ...	The Initialize and script ActiveX controls not mar...	-
Check Text The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding. Fix Text Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box. Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl Scan Date: 2026-03-04T15:25:41.971891 Technology Area: Windows Operating System

Page 1 of 28

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text

Finding Details

Check Text

Fix Text