USNS MONTFORD POINT - Findings

V-252910 CAT I The version of Internet Explorer running on the system must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9C4B5762692E4BAE01265CF37571D6925E56B0A8 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Standard Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 20084BF752FA10BB981D8B6E81803EB2C45CEE3E ~~~~~ Internet Explorer is supported on Windows 10 Enterprise LTSC 2021 Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 706CA921B1BB87A50E66A36A7BDB4BF559619D90 ~~~~~ Internet Explorer is supported on Microsoft Windows Server 2016 Datacenter Reference: https://docs.microsoft.com/en-us/lifecycle/faq/internet-explorer-microsoft-edge Comments

Check Text

Internet Explorer 11 is no longer supported on Windows 10 General Availability Channel. If Internet Explorer 11 is installed and enabled on Windows 10 General Availability Channel, this is a finding. If Internet Explorer 11 is installed and enabled on an unsupported OS, this is a finding.

Fix Text

For Windows 10 General Availability Channel, remove or disable the Internet Explorer 11 application. To disable Internet Explorer 11 as a standalone browser, set the policy value for "Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Disable Internet Explorer 11 as a standalone browser" to "Enabled" with the option value set to "Never" or "Once per user".

V-223015 CAT II The Internet Explorer warning about certificate address mism...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C740D155F739E33D4BCF241F10A30B8AD181E8C2 ~~~~~ 'Turn on certificate address mismatch warning' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: WarnOnBadCertRecving Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Criteria: If the value "WarnOnBadCertRecving" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page 'Turn on certificate address mismatch warning' to 'Enabled'.

V-223017 CAT II The Download signed ActiveX controls property must be disall...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3F22B5411CE610C33B78A2DE3E6D7AD63C6CED47 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223018 CAT II The Download unsigned ActiveX controls property must be disa...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4B358A0EB3D5A52F3736FC6092BCCB3C5B989235 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223019 CAT II The Initialize and script ActiveX controls not marked as saf...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B3193156E90DCF50C47AB992F6BBA40A4D23B71D ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box.

V-223020 CAT II The Java permissions must be disallowed (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A58247C8DCF08525522F82DEA414D97CB3295F0 ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223021 CAT II Accessing data sources across domains must be disallowed (In...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F35816FD6EEC85CB4BC325970628E012B337A6E0 ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Access data sources across domains' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1406" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Access data sources across domains' to 'Enabled', and select 'Disable' from the drop-down box.

V-223022 CAT II Functionality to drag and drop or copy and paste files must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F2452A04E565CA8350F749640BE25D9F1FFAB4DA ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow drag and drop or copy and paste files' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value for "1802" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow drag and drop or copy and paste files' to 'Enabled', and select 'Disable' from the drop-down box.

V-223023 CAT II Launching programs and files in IFRAME must be disallowed (I...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 06CD4AB54F8B415E596E21D88D920C548F4FDB3E ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Launching applications and files in an IFRAME' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1804" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Launching applications and files in an IFRAME' to 'Enabled', and select 'Disable' from the drop-down box.

V-223024 CAT II Navigating windows and frames across different domains must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AE0F940B76B1410F8BD2B7AB2BBE614D575F585B ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Navigate windows and frames across different domains' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\Zones\3 Criteria: If the value "1607" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Navigate windows and frames across different domains' to 'Enabled', and select 'Disable' from the drop-down box.

V-223025 CAT II Userdata persistence must be disallowed (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BE0BF2DBB4E0D04E080C3C885891CB01458A5B9F ~~~~~ 'Userdata persistence' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1606 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Userdata persistence' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1606" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Userdata persistence' to 'Enabled', and select 'Disable' from the drop-down box.

V-223026 CAT II Clipboard operations via script must be disallowed (Internet...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FFD1E4B84E0CBE68BE30DA2559F366F38789BC80 ~~~~~ 'Allow cut, copy or paste operations from the clipboard via script' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1407 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow cut, copy or paste operations from the clipboard via script' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1407" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Allow cut, copy or paste operations from the clipboard via script' to 'Enabled', and select 'Disable' from the drop-down box.

V-223027 CAT II Logon options must be configured to prompt (Internet zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 95BC7DBEF3153560B672947ADDBF13B01D56507D ~~~~~ 'Logon options' is Enabled: (Prompt for user name and password) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 1A00 Value: 0x00010000 (65536) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Logon options' must be 'Enabled', and 'Prompt for user name and password' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "1A00" is REG_DWORD = 65536 (decimal), this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Internet Zone -> 'Logon options' to 'Enabled', and select 'Prompt for user name and password' from the drop-down box.

V-223028 CAT II Java permissions must be configured with High Safety (Intran...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 446F39D1CA7FE8BB18909AA4A4ADC90488CA60DB ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Intranet Zone -> 'Java permissions' must be 'Enabled', and 'High Safety' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Criteria: If the value "1C00" is REG_DWORD = 65536, (Decimal), this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Intranet Zone -> 'Java permissions' to 'Enabled', and select 'High Safety' from the drop-down box.

V-223029 CAT II Anti-Malware programs against ActiveX controls must be run f...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: ED7507C11E4EFADDB45D6764C8E649F14E17B771 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Intranet Zone 'Don't run antimalware programs against ActiveX controls' must be 'Enabled' and 'Disable' selected in the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Criteria: If the value "270C" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Intranet Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

V-223030 CAT II Java permissions must be configured with High Safety (Truste...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3C3FAEA2189CB8216096AA736698DC8532EBF0AC ~~~~~ 'Java permissions' is Enabled: (High Safety) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1C00 Value: 0x00010000 (65536) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Trusted Sites Zone -> 'Java permissions' must be 'Enabled', and 'High Safety' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Criteria: If the value "1C00" is REG_DWORD = 65536, (Decimal), this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Trusted Sites Zone -> 'Java permissions' to 'Enabled', and select 'High Safety' from the drop-down box.

V-223031 CAT II Anti-Malware programs against ActiveX controls must be run f...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 023915BB8053E31DADA258F9FA37872214BE0525 ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Trusted Sites Zone 'Don't run antimalware programs against ActiveX controls' must be 'Enabled' and 'Disable' selected in the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Criteria: If the value "270C" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Trusted Sites Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

V-223032 CAT II Dragging of content from different domains within a window m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4F95BDF0E8C69A923FEAD312C0EC48CDBA82ECF1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Internet Zone 'Enable dragging of content from different domains within a window' must be 'Enabled', and 'Disabled' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "2708" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Internet Zone 'Enable dragging of content from different domains within a window' to 'Enabled', and select 'Disabled' from the drop-down box.

V-223033 CAT II Dragging of content from different domains across windows mu...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 03058828A7855AE10049CE3A9792B662EC4CA98D ~~~~~ 'Enable dragging of content from different domains across windows' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2709 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Restricted Sites Zone 'Enable dragging of content from different domains across windows' must be 'Enabled', and 'Disabled' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2709" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Restricted Sites Zone 'Enable dragging of content from different domains across windows' to 'Enabled', and select 'Disabled' from the drop-down box.

V-223034 CAT II Internet Explorer Processes Restrict ActiveX Install must be...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 27610D93119CA8A70F5E52138A79DD00B74B11C1 ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: explorer.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Criteria: If the value "explorer.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' to 'Enabled'.

V-223035 CAT II Internet Explorer Processes Restrict ActiveX Install must be...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4CFC6375756BB0A5BE6825107D843A3A86837ACA ~~~~~ 'Internet Explorer Processes' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Value Name: iexplore.exe Value: 1 Type: REG_SZ Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' must be 'Enabled'. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL Criteria: If the value "iexplore.exe" is REG_SZ = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Restrict ActiveX Install -> 'Internet Explorer Processes' to 'Enabled'.

V-223036 CAT II Dragging of content from different domains within a window m...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 1AD2C94EB4AA710A30096BD4F7FA020D42D27EB1 ~~~~~ 'Enable dragging of content from different domains within a window' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2708 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Restricted Sites Zone 'Enable dragging of content from different domains within a window' must be 'Enabled', and 'Disabled' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "2708" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel-> Security Page-> Restricted Sites Zone 'Enable dragging of content from different domains within a window' to 'Enabled', and select 'Disabled' from the drop-down box.

V-223037 CAT II Anti-Malware programs against ActiveX controls must be run f...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2BAF0B876822ADF4F3709A884A06EF1A32D9D0DD ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Internet Zone 'Don't run antimalware programs against ActiveX controls' must be 'Enabled' and 'Disable' selected in the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "270C" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Internet Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

V-223038 CAT II Anti-Malware programs against ActiveX controls must be run f...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4728562B6821D9E8AA91014100861DDBAAB956DF ~~~~~ 'Don't run antimalware programs against ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 270C Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Don't run antimalware programs against ActiveX controls' must be 'Enabled' and 'Disable' selected in the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "270C" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Restricted Sites Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

V-223039 CAT II Prevent bypassing SmartScreen Filter warnings must be enable...

10 assets 8 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 43E6AF8D105D9FA9140B47F22B1C18B2A940C8E9 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverride Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

If the system is on the SIPRNet, this requirement is NA. The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent bypassing SmartScreen Filter warnings” must be ”Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter. Criteria: If the value "PreventOverride" is REG_DWORD = 1, this is not a finding.

Fix Text

If the system is on the SIPRNet, this requirement is NA. Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent bypassing SmartScreen Filter warnings” to ”Enabled”.

V-223040 CAT II Prevent bypassing SmartScreen Filter warnings about files th...

10 assets 8 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8D750331508AF97A074A6557128E30F446FD6BC0 ~~~~~ 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter Value Name: PreventOverrideAppRepUnknown Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

If the system is on the SIPRNet, this requirement is NA. The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet” must be ”Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter. Criteria: If the value "PreventOverrideAppRepUnknown" is REG_DWORD = 1, this is not a finding.

Fix Text

If the system is on the SIPRNet, this requirement is NA. Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet” to ”Enabled”.

V-223041 CAT II Prevent per-user installation of ActiveX controls must be en...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 5AC216092704985DF0EC82AC2F64814DC70512BA ~~~~~ 'Prevent per-user installation of ActiveX controls' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Security\ActiveX Value Name: BlockNonAdminActiveXInstall Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent per-user installation of ActiveX controls” must be ”Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX. Criteria: If the value "BlockNonAdminActiveXInstall" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> ”Prevent per-user installation of ActiveX controls” to ”Enabled”.

V-223042 CAT II Prevent ignoring certificate errors option must be enabled.

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 739627E3354609BFF4E04B1E02459F7D7B021FEF ~~~~~ 'Prevent ignoring certificate errors' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: PreventIgnoreCertErrors Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> ”Prevent ignoring certificate errors” must be ”Enabled”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings. Criteria: If the value "PreventIgnoreCertErrors" is REG_DWORD = 1, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> ”Prevent ignoring certificate errors” to ”Enabled”.

V-223043 CAT II Turn on SmartScreen Filter scan option for the Internet Zone...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAE579C0A762E3CD703C058B1914620FEEE33347 ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Internet Zone >> ”Turn on SmartScreen Filter scan” must be ”Enabled” and ”Enable” selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3. Criteria: If the value "2301" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Internet Zone >> ”Turn on SmartScreen Filter scan” to ”Enabled”, and select ”Enable” from the drop-down box.

V-223044 CAT II Turn on SmartScreen Filter scan option for the Restricted Si...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4A2D9A8C51A54B876101034DC9E95D13DA77974A ~~~~~ 'Turn on SmartScreen Filter scan' is Enabled: (Enable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 2301 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone >> ”Turn on SmartScreen Filter scan” must be ”Enabled” and ”Enable” selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4. Criteria: If the value "2301" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone >> ”Turn on SmartScreen Filter scan” to ”Enabled”, and select ”Enable” from the drop-down box.

V-223045 CAT II The Initialize and script ActiveX controls not marked as saf...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 76FD706791B33ED9C6F8121D0F0530B9F60F269E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Intranet Zone >> ”Initialize and script ActiveX controls not marked as safe” must be ”Enabled” and ”Disable” selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1. Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Intranet Zone >> ”Initialize and script ActiveX controls not marked as safe” to ”Enabled”, and select ”Disable” from the drop-down box.

V-223046 CAT II The Initialize and script ActiveX controls not marked as saf...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C6BA85E4993C3D2F56A9DDA62AB97B6950CB308B ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Trusted Sites Zone >> ”Initialize and script ActiveX controls not marked as safe” must be ”Enabled” and ”Disable” selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2. Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Trusted Sites Zone >> ”Initialize and script ActiveX controls not marked as safe” to ”Enabled”, and select ”Disable” from the drop-down box.

V-223048 CAT II Run once selection for running outdated ActiveX controls mus...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 18D22A196B80E17A414B982E892B2104D0D5A18D ~~~~~ 'Remove the Run this time button for outdated ActiveX controls in IE' is Enabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: RunThisTimeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> Add-on Management, verify "Remove the Run this time button for outdated ActiveX controls in IE" is set to “Enabled”. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext If the value "RunThisTimeEnabled" is REG_DWORD = 0, this is not a finding.

Fix Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> Add-on Management, set "Remove the Run this time button for outdated ActiveX controls in IE" to "Enabled".

V-223049 CAT II Enabling outdated ActiveX controls for Internet Explorer mus...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 192FA65B64EBCFF71106E711A10C97D0C84B2934 ~~~~~ 'Turn off blocking of outdated ActiveX controls for Internet Explorer' is Disabled Registry Path: HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext Value Name: VersionCheckEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> Add-on Management, verify "Turn off blocking of outdated ActiveX controls for Internet Explorer" is set to “Disabled”. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext If the value "VersionCheckEnabled" is REG_DWORD = 1, this is not a finding.

Fix Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Security Features >> Add-on Management, set "Turn off blocking of outdated ActiveX controls for Internet Explorer" to "Disabled".

V-223050 CAT II Use of the Tabular Data Control (TDC) ActiveX control must b...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 12F39CB3203C65F91E63FF25EC98E404973399C4 ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Internet Zone, verify "Allow only approved domains to use the TDC ActiveX control" is “Enabled”. In the Options window, verify the “Only allow approved domains to use the TDC ActiveX control" drop-down box is set to “Enable”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Criteria: If the value "120c" is REG_DWORD = “3”, this is not a finding.

Fix Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Pane >> Security Page >> Internet Zone, set the "Allow only approved domains to use the TDC ActiveX control" to “Enabled”. In the Options window, select "Enable" from the “Only allow approved domains to use the TDC ActiveX control" drop-down box.

V-223051 CAT II The Download signed ActiveX controls property must be disall...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0E859A243CE3F58413F6318FFCAC4210CC6D729 ~~~~~ 'Download signed ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1001 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Download signed ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1001" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Download signed ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223052 CAT II Use of the Tabular Data Control (TDC) ActiveX control must b...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D0D2FFCCE47EC6645F72E2C3176E477F5144D90D ~~~~~ 'Allow only approved domains to use the TDC ActiveX control' is Enabled: (Only allow approved domains to use the TDC ActiveX control) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 120c Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone, verify "Allow only approved domains to use the TDC ActiveX control" is “Enabled”. In the Options window, verify the “Only allow approved domains to use the TDC ActiveX control" drop-down box is set to “Enable”. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "120c" is REG_DWORD = “3”, this is not a finding.

Fix Text

In the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone, set the "Allow only approved domains to use the TDC ActiveX control" to “Enabled”. In the Options windows, select "Enable" from the “Only allow approved domains to use the TDC ActiveX control" drop-down box.

V-223053 CAT II VBScript must not be allowed to run in Internet Explorer (In...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 114534C993408F0615C96A38914ED9093ED0CA71 ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Internet Zone >> "Allow VBScript to run in Internet Explorer" must be "Enabled", and "Disable" must be selected from the drop-down box. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 If the value for "140C" is not REG_DWORD = 3, this is a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Internet Zone >> "Allow VBScript to run in Internet Explorer" to "Enabled" and select "Disable" from the drop-down box.

V-223054 CAT II The Download unsigned ActiveX controls property must be disa...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8ED7E1F63A2AB237A78DD0C395FF424828C051C3 ~~~~~ 'Download unsigned ActiveX controls' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1004 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Download unsigned ActiveX controls' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1004" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Download unsigned ActiveX controls' to 'Enabled', and select 'Disable' from the drop-down box.

V-223055 CAT II VBScript must not be allowed to run in Internet Explorer (Re...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7516B6F44D45C54C7DAA4FA89D0658129E3AD6ED ~~~~~ 'Allow VBScript to run in Internet Explorer' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 140C Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone >> "Allow VBScript to run in Internet Explorer" must be "Enabled", and "Disable" must be selected from the drop-down box. Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 If the value for "140C" is not REG_DWORD = 3, this is a finding.

Fix Text

Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Security Page >> Restricted Sites Zone >> "Allow VBScript to run in Internet Explorer" to "Enabled" and select "Disable" from the drop-down box.

V-223057 CAT II The Initialize and script ActiveX controls not marked as saf...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 807B6DBA1B59E9C773E99FB7A7E43839AB39504E ~~~~~ 'Initialize and script ActiveX controls not marked as safe' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1201 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Initialize and script ActiveX controls not marked as safe' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1201" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Initialize and script ActiveX controls not marked as safe' to 'Enabled', and select 'Disable' from the drop-down box.

V-223058 CAT II ActiveX controls and plug-ins must be disallowed (Restricted...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 771C7BED0CBCC85BD0393F9EAC4A669D21D12511 ~~~~~ 'Run ActiveX controls and plugins' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1200 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run ActiveX controls and plugins' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1200" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Run ActiveX controls and plugins' to 'Enabled', and select 'Disable' from the drop-down box.

V-223059 CAT II ActiveX controls marked safe for scripting must be disallowe...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B82E785F341FCD3CDC86BCE0E0CA98561754CC8A ~~~~~ 'Script ActiveX controls marked safe for scripting' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1405 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Script ActiveX controls marked safe for scripting' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1405" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Script ActiveX controls marked safe for scripting' to 'Enabled', and select 'Disable' from the drop-down box.

V-223060 CAT II File downloads must be disallowed (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 946443DE0D08E7DAC8E5FAC825FD3B5D71DDE54E ~~~~~ 'Allow file downloads' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1803 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow file downloads' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1803" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow file downloads' to 'Enabled', and select 'Disable' from the drop-down box.

V-223061 CAT II Java permissions must be disallowed (Restricted Sites zone).

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D8B04BA580BCCA409DC1D447985F393364E9742D ~~~~~ 'Java permissions' is Enabled: (Disable Java) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1C00 Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Java permissions' must be 'Enabled', and 'Disable Java' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1C00" is REG_DWORD = 0, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Java permissions' to 'Enabled', and select 'Disable Java' from the drop-down box.

V-223062 CAT II Accessing data sources across domains must be disallowed (Re...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 813DBD4CB8CBC018FC3AB8959823D8BA4B4AFA9D ~~~~~ 'Access data sources across domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1406 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Access data sources across domains' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1406" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Access data sources across domains' to 'Enabled', and select 'Disable' from the drop-down box.

V-223063 CAT II The Allow META REFRESH property must be disallowed (Restrict...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 611444450B07985A7DE4B1C78B47B715761C69D6 ~~~~~ 'Allow META REFRESH' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1608 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow META REFRESH' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1608" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow META REFRESH' to 'Enabled', and select 'Disable' from the drop-down box.

V-223064 CAT II Functionality to drag and drop or copy and paste files must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AD72048DC1461E17BA7858B97556A6EF9F7AADF2 ~~~~~ 'Allow drag and drop or copy and paste files' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1802 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow drag and drop or copy and paste files' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1802" is REG_DWORD=3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Allow drag and drop or copy and paste files' to 'Enabled', and select 'Disable' from the drop-down box.

V-223065 CAT II Launching programs and files in IFRAME must be disallowed (R...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B7B96738F29B2C2D42616223F83D2F1ECF94EFCB ~~~~~ 'Launching applications and files in an IFRAME' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1804 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Launching applications and files in an IFRAME' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1804" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Launching applications and files in an IFRAME' to 'Enabled', and select 'Disable' from the drop-down box.

V-223066 CAT II Navigating windows and frames across different domains must ...

10 assets 10 Closed Microsoft Internet E...

Hostname	IP Address	Last Scan
MONT-AP-002	164.231.187.39	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-BE-002	164.231.187.37	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DB-002	164.231.187.38	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DC-003	164.231.187.34	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-DP-001	164.231.187.44	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-MB-002	164.231.187.36	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-003	164.231.187.42	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments
MONT-VSF-004	164.231.187.43	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DEAD3087E7175FCE6A437F6CF12CAD77B36293F9 ~~~~~ 'Navigate windows and frames across different domains' is Enabled: (Disable) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Value Name: 1607 Value: 0x00000003 (3) Type: REG_DWORD Comments

Check Text

The policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Navigate windows and frames across different domains' must be 'Enabled', and 'Disable' selected from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4 Criteria: If the value "1607" is REG_DWORD = 3, this is not a finding.

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page -> Restricted Sites Zone -> 'Navigate windows and frames across different domains' to 'Enabled', and select 'Disable' from the drop-down box.

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments