Details
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By default, the Information Bar is displayed for Internet Explorer processes. The recommended state for this setting is: Enabled. (Check: groove.exe, excel.exe, mspub.exe, powerpnt.exe, pptview.exe, visio.exe, winproj.exe, outlook.exe, spDesign.exe, exprwd.exe, msaccess.exe, onent.exe, mse7.exe) The information bar can help users to understand when potentially malicious content has been blocked, on the other hand, some users may be confused by the appearance of the bar or unsure how to respond.
Solution
To implement the recommended configuration state, set the following Group Policy setting to Enabled. Computer ConfigurationAdministrative TemplatesMicrosoft Office 2016 (Machine)Security SettingsIE SecurityInformation Bar Impact: The security bar will be enabled for each of the specified applications.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.