Category: At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1

Internet Explorer allows scripts to programmatically open resize and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows’ title and status bars. This policy setting allows administrators to define applications for which they want this security feature to be prevented or allowed. If you enable this policy setting and enter a Value of 1 such windows may not be opened. If you enter a Value of 0 windows have none of these restrictions. The Value Name is the name of the executable. If a Value Name is empty or the Value is not 0 or 1 the policy setting is ignored. Do not enter the Internet Explorer processes in this list: use the related Internet Explorer Processes policy to enable or disable IE processes. If the All Processes policy setting is enabled the processes configured in this box take precedence over that setting. If you disable or do not configure this policy setting the security feature is allowed.

Internet Explorer allows scripts to programmatically open resize and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows’ title and status bars. If you enable this policy setting popup windows and other restrictions apply for File Explorer and Internet Explorer processes. If you disable this policy setting scripts can continue to create popup windows and windows that obfuscate other windows. If you do not configure this policy setting popup windows and other restrictions apply for File Explorer and Internet Explorer processes.

Internet Explorer allows scripts to programmatically open resize and reposition windows of various types. The Window Restrictions security feature restricts popup windows and prohibits scripts from displaying windows in which the title and status bars are not visible to the user or obfuscate other Windows’ title and status bars. If you enable this policy setting scripted windows are restricted for all processes. If you disable or do not configure this policy setting scripted windows are not restricted.

This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting file download prompts that are not user initiated will be blocked for Internet Explorer processes. If you disable this policy setting prompting will occur for file downloads that are not user initiated for Internet Explorer processes. If you do not configure this policy setting the user’s preference determines whether to prompt for file downloads that are not user initiated for Internet Explorer processes.

This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not user initiated. If you enable this policy setting the Web Browser Control will block automatic prompting of file downloads that are not user initiated for all processes. If you disable this policy setting the Web Browser Control will not block automatic prompting of file downloads that are not user initiated for all processes.

This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installation. If you enable this policy setting and enter a Value of 1 automatic prompting of ActiveX control installation is blocked. If you enter a Value of 0 automatic prompting of ActiveX control installation is allowed. The Value Name is the name of the executable. If a Value Name is empty or the Value is not 0 or 1 the policy setting is ignored. Do not enter the Internet Explorer processes in this list: use the related Internet Explorer Processes policy to enable or disable IE processes. If the All Processes policy setting is enabled the processes configured in this box take precedence over that setting. If you disable or do not configure this policy setting the security feature is allowed.