Details
This policy setting prevents users from saving a program or file that Internet Explorer has
downloaded to the hard disk. If you enable this policy setting, users cannot save programs
to disk with the Save this program to disk option. The program file will not download, and
the user is informed that the command is not available. The recommended state for this
setting is- Enabled.
*Rationale*
Users could download and execute hostile code from Web sites.
Solution
To establish the recommended configuration via Group Policy, set the following UI path to
Enabled.
User ConfigurationAdministrative TemplatesWindows ComponentsInternet
ExplorerBrowser menusDisable Save this program to disk option
Impact-Users will be unable to click the Save This Program to Disk button to download program
files.
Default Value-Disabled
2 ActiveX Settings
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.