Turn off phone number detection

This policy setting determines whether phone numbers are recognized and turned into hyperlinks which can be used to invoke the default phone application on the system.If you enable this policy setting phone number detection is turned off. Users won’t be able to modify this setting.If you disable this policy setting phone number detection is turned on. Users won’t be able to modify this setting.If you don’t configure this policy setting users can turn this behavior on or off using Internet Explorer settings. The default is on.

Turn off sending UTF-8 query strings for URLs

This policy setting determines whether Internet Explorer uses 8-bit Unicode Transformation Format (UTF-8) to encode query strings in URLs before sending them to servers or to proxy servers.If you enable this policy setting you must specify when to use UTF-8 to encode query strings: 0) Never encode query strings. 1) Only encode query strings for URLs that aren’t in the Intranet zone. 2) Only encode query strings for URLs that are in the Intranet zone. 3) Always encode query strings.If you disable or don’t configure this policy setting users can turn this behavior on or off using Internet Explorer Advanced Options settings. The default is to encode all query strings in UTF-8.

Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar

This policy setting allows Internet Explorer to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions the user’s keystrokes are sent to Microsoft through Microsoft services.If you enable this policy setting users receive enhanced suggestions while typing in the Address bar. In addition users won’t be able to change the Suggestions setting on the Settings charm.If you disable this policy setting users won’t receive enhanced suggestions while typing in the Address bar. In addition users won’t be able to change the Suggestions setting on the Settings charm.If you don’t configure this policy setting users can change the Suggestions setting on the Settings charm.

Don’t run antimalware programs against ActiveX controls

This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls to check if they’re safe to load on pages. If you enable this policy setting Internet Explorer won’t check with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you disable this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you don’t configure this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control. Users can turn this behavior on or off using Internet Explorer Security settings.

Don’t run antimalware programs against ActiveX controls

This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls to check if they’re safe to load on pages. If you enable this policy setting Internet Explorer won’t check with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you disable this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you don’t configure this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control. Users can turn this behavior on or off using Internet Explorer Security settings.

Don’t run antimalware programs against ActiveX controls

This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls to check if they’re safe to load on pages. If you enable this policy setting Internet Explorer won’t check with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you disable this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you don’t configure this policy setting Internet Explorer won’t check with your antimalware program to see if it’s safe to create an instance of the ActiveX control. Users can turn this behavior on or off using Internet Explorer Security settings.

Don’t run antimalware programs against ActiveX controls

This policy setting determines whether Internet Explorer runs antimalware programs against ActiveX controls to check if they’re safe to load on pages. If you enable this policy setting Internet Explorer won’t check with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you disable this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control.If you don’t configure this policy setting Internet Explorer always checks with your antimalware program to see if it’s safe to create an instance of the ActiveX control. Users can turn this behavior on or off using Internet Explorer Security settings.

Turn off loading websites and content in the background to optimize performance

This policy setting determines whether Internet Explorer preemptively loads websites and content in the background speeding up performance such that when the user clicks a hyperlink the background page seamlessly switches into view.If you enable this policy setting Internet Explorer doesn’t load any websites or content in the background.If you disable this policy setting Internet Explorer preemptively loads websites and content in the background.If you don’t configure this policy setting users can turn this behavior on or off using Internet Explorer settings. This feature is turned on by default

Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows

This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.Important: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.If you enable this policy setting Internet Explorer 11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.If you disable this policy setting Internet Explorer 11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.If you don’t configure this policy setting users can turn this feature on or off using Internet Explorer settings. This feature is turned off by default.

Use biometrics

Microsoft Passport for Work enables users to use biometric gestures such as face and fingerprints as an alternative to the PIN gesture. However users must still configure a work PIN to use in case of failures.If you enable this policy setting Microsoft Passport for Work allows the use biometric gestures on.If you disable this policy setting Microsoft Passport for Work prevents the use of biometric gestures.If you do not configure this policy setting Microsoft Passport for Work allows the use of biometric gestures.NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types.