Category: At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
Enable dragging of content from different domains across windows
This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in different windows. If you enable this policy setting and click Enable users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting. If you enable this policy setting and click Disable users cannot drag content from one domain to a different domain when both the source and destination are in different windows. Users cannot change this setting. In Internet Explorer 10 if you disable this policy setting or do not configure it users cannot drag content from one domain to a different domain when the source and destination are in different windows. Users can change this setting in the Internet Options dialog. In Internet Explorer 9 and earlier versions if you disable this policy or do not configure it users can drag content from one domain to a different domain when the source and destination are in different windows. Users cannot change this setting.
Navigate windows and frames across different domains
This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. If you enable this policy setting users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box users are queried whether to allow windows and frames to access applications from other domains. If you disable this policy setting users cannot open windows and frames to access applications from different domains. If you do not configure this policy setting users can open windows and frames from othe domains and access applications from other domains.
Navigate windows and frames across different domains
This policy setting allows you to manage the opening of windows and frames and access of applications across different domains. If you enable this policy setting users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box users are queried whether to allow windows and frames to access applications from other domains. If you disable this policy setting users cannot open windows and frames to access applications from different domains. If you do not configure this policy setting users can open windows and frames from othe domains and access applications from other domains.
Allow active content over restricted protocols to access my computer
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script ActiveX Java and Binary Behaviors. The list of restricted protocols may be set in the Intranet Zone Restricted Protocols section under Network Protocol Lockdown policy. If you enable this policy setting no Intranet Zone content accessed is affected even for protocols on the restricted list. If you select Prompt from the drop-down box the Notification bar will appear to allow control over questionable content accessed over any restricted protocols; content over other protocols is unaffected. If you disable this policy setting all attempts to access such content over the restricted protocols is blocked. If you do not configure this policy setting the Notification bar will appear to allow control over questionable content accessed over any restricted protocols when the Network Protocol Lockdown security feature is enabled.
Java permissions
This policy setting allows you to manage permissions for Java applets. If you enable this policy setting you can choose options from the drop-down box. Custom to control permissions settings individually. Low Safety enables applets to perform all operations. Medium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls) plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. If you disable this policy setting Java applets cannot run. If you do not configure this policy setting the permission is set to Medium Safety.
Java permissions
This policy setting allows you to manage permissions for Java applets. If you enable this policy setting you can choose options from the drop-down box. Custom to control permissions settings individually. Low Safety enables applets to perform all operations. Medium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls) plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O. High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running. If you disable this policy setting Java applets cannot run. If you do not configure this policy setting the permission is set to Medium Safety.
Launching applications and files in an IFRAME
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. If you enable this policy setting users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone. If you disable this policy setting users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone. If you do not configure this policy setting users can run applications and download files from IFRAMEs on the pages in this zone without user intervention.
Launching applications and files in an IFRAME
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. If you enable this policy setting users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone. If you disable this policy setting users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone. If you do not configure this policy setting users can run applications and download files from IFRAMEs on the pages in this zone without user intervention.
Logon options
This policy setting allows you to manage settings for logon options. If you enable this policy setting you can choose from the following logon options. Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol. Prompt for user name and password to query users for user IDs and passwords. After a user is queried these values can be used silently for the remainder of the session. Automatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried these values can be used silently for the remainder of the session. Automatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server the logon uses the user’s network user name and password for logon. If Windows NT Challenge Response is not supported by the server the user is queried to provide the user name and password. If you disable this policy setting logon is set to Automatic logon only in Intranet zone. If you do not configure this policy setting logon is set to Automatic logon with current username and password.
Logon options
This policy setting allows you to manage settings for logon options. If you enable this policy setting you can choose from the following logon options. Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol. Prompt for user name and password to query users for user IDs and passwords. After a user is queried these values can be used silently for the remainder of the session. Automatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried these values can be used silently for the remainder of the session. Automatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server the logon uses the user’s network user name and password for logon. If Windows NT Challenge Response is not supported by the server the user is queried to provide the user name and password. If you disable this policy setting logon is set to Automatic logon only in Intranet zone. If you do not configure this policy setting logon is set to Automatic logon with current username and password.