Details
*Description*
This policy setting allows you to manage whether users can install Active Desktop items
from this zone. The recommended state for this setting is- Enabled-Disable.
*Rationale*
Active Desktop items could contain links to unauthorized websites or other undesirable
content, it is prudent to prevent users from installing desktop items from this security
zone.
Solution
To implement the recommended configuration state, set the following Group Policy setting
to Enabled.
Computer ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerInternet Control PanelSecurity PageInternet ZoneAllow installation of
desktop itemsAllow installation of desktop items
Then set the Allow installation of desktop items option to Disable.
Impact-The settings for this option are- Enabled, users can install desktop items from this zone
automatically. Prompt, users are queried to choose whether to install desktop items from
this zone. Disabled, users are prevented from installing desktop items from this zone. If you
do not configure this policy setting, users are prevented from installing desktop items from
this zone.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.