Run .NET Framework-reliant components not signed with Authenticode

This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.

If you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.

If you disable this policy setting, Internet Explorer will not execute unsigned managed components.

If you do not configure this policy setting, Internet Explorer will not execute unsigned managed components.

Supported on: At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
Run .NET Framework-reliant components not signed with Authenticode


  1. Enable
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
    Value Name2004
    Value TypeREG_DWORD
    Value0
  2. Disable
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
    Value Name2004
    Value TypeREG_DWORD
    Value3
  3. Prompt
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
    Value Name2004
    Value TypeREG_DWORD
    Value1


inetres.admx

Administrative Templates (Computers)

Administrative Templates (Users)