Microsoft Security Baselines (SCT) 2602
AllInternet Explorer 11 - ComputerInternet Explorer 11 - UserWindows Server 2025 - Defender AntivirusWindows Server 2025 - Domain ControllerWindows Server 2025 - Domain Controller Virtualization Based SecurityWindows Server 2025 - Domain SecurityWindows Server 2025 - Member ServerWindows Server 2025 - Member Server Credential Guard
| Ref | Title | Text | |
|---|---|---|---|
| RunThisTimeEnabled | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\RunThisTimeEnabled | REG_DWORD = 0 | |
| VersionCheckEnabled | HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\VersionCheckEnabled | REG_DWORD = 1 | |
| CheckExeSignatures | HKLM\Software\Policies\Microsoft\Internet Explorer\Download\CheckExeSignatures | REG_SZ = yes | |
| RunInvalidSignatures | HKLM\Software\Policies\Microsoft\Internet Explorer\Download\RunInvalidSignatures | REG_DWORD = 0 | |
| DisableEPMCompat | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\DisableEPMCompat | REG_DWORD = 1 | |
| DisableInternetExplorerLaunchViaCOM | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\DisableInternetExplorerLaunchViaCOM | REG_DWORD = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS\iexplore.exe | REG_SZ = 1 | |
| (Reserved) | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\(Reserved) | REG_SZ = 1 | |
| explorer.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\explorer.exe | REG_SZ = 1 | |
| iexplore.exe | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION\iexplore.exe | REG_SZ = 1 | |
| Isolation | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Isolation | REG_SZ = PMEM | |
| Isolation64Bit | HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Isolation64Bit | REG_DWORD = 1 | |
| EnabledV9 | HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter\EnabledV9 | REG_DWORD = 1 | |
| PreventOverride | HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter\PreventOverride | REG_DWORD = 1 | |
| PreventOverrideAppRepUnknown | HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter\PreventOverrideAppRepUnknown | REG_DWORD = 1 | |
| NoCrashDetection | HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoCrashDetection | REG_DWORD = 1 | |
| BlockNonAdminActiveXInstall | HKLM\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX\BlockNonAdminActiveXInstall | REG_DWORD = 1 | |
| DisableSecuritySettingsCheck | HKLM\Software\Policies\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck | REG_DWORD = 0 | |
| OnlyUseAXISForActiveXInstall | HKLM\Software\Policies\Microsoft\Windows\AxInstaller\OnlyUseAXISForActiveXInstall | REG_DWORD = 1 | |
| CertificateRevocation | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CertificateRevocation | REG_DWORD = 1 | |
| EnableSSL3Fallback | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnableSSL3Fallback | REG_DWORD = 0 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0\1C00 | REG_DWORD = 0 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1\1C00 | REG_DWORD = 0 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2\1C00 | REG_DWORD = 0 | |
| 2301 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3\2301 | REG_DWORD = 0 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4\1C00 | REG_DWORD = 0 | |
| 2301 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4\2301 | REG_DWORD = 0 | |
| PreventIgnoreCertErrors | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\PreventIgnoreCertErrors | REG_DWORD = 1 | |
| SecureProtocols | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols | REG_DWORD = 2560 | |
| Security_HKLM_only | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only | REG_DWORD = 1 | |
| Security_options_edit | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_options_edit | REG_DWORD = 1 | |
| Security_zones_map_edit | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_zones_map_edit | REG_DWORD = 1 | |
| WarnOnBadCertRecving | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnBadCertRecving | REG_DWORD = 1 | |
| UNCAsIntranet | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet | REG_DWORD = 0 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1C00 | REG_DWORD = 0 | |
| 270C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\270C | REG_DWORD = 0 | |
| 1201 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1201 | REG_DWORD = 3 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1C00 | REG_DWORD = 65536 | |
| 270C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\270C | REG_DWORD = 0 | |
| 1201 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1201 | REG_DWORD = 3 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1C00 | REG_DWORD = 65536 | |
| 270C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\270C | REG_DWORD = 0 | |
| 1001 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1001 | REG_DWORD = 3 | |
| 1004 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1004 | REG_DWORD = 3 | |
| 1201 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1201 | REG_DWORD = 3 | |
| 1206 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1206 | REG_DWORD = 3 | |
| 1209 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1209 | REG_DWORD = 3 | |
| 120b | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\120b | REG_DWORD = 3 | |
| 120c | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\120c | REG_DWORD = 3 | |
| 1406 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1406 | REG_DWORD = 3 | |
| 1407 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1407 | REG_DWORD = 3 | |
| 1409 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1409 | REG_DWORD = 0 | |
| 140C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\140C | REG_DWORD = 3 | |
| 1606 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1606 | REG_DWORD = 3 | |
| 1607 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1607 | REG_DWORD = 3 | |
| 160A | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\160A | REG_DWORD = 3 | |
| 1802 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1802 | REG_DWORD = 3 | |
| 1804 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1804 | REG_DWORD = 3 | |
| 1806 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1806 | REG_DWORD = 1 | |
| 1809 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1809 | REG_DWORD = 0 | |
| 1A00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1A00 | REG_DWORD = 65536 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1C00 | REG_DWORD = 0 | |
| 2001 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2001 | REG_DWORD = 3 | |
| 2004 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2004 | REG_DWORD = 3 | |
| 2101 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2101 | REG_DWORD = 3 | |
| 2102 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2102 | REG_DWORD = 3 | |
| 2103 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2103 | REG_DWORD = 3 | |
| 2200 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2200 | REG_DWORD = 3 | |
| 2301 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2301 | REG_DWORD = 0 | |
| 2402 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2402 | REG_DWORD = 3 | |
| 2500 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500 | REG_DWORD = 0 | |
| 2708 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2708 | REG_DWORD = 3 | |
| 2709 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2709 | REG_DWORD = 3 | |
| 270C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\270C | REG_DWORD = 0 | |
| 1001 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1001 | REG_DWORD = 3 | |
| 1004 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1004 | REG_DWORD = 3 | |
| 1200 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1200 | REG_DWORD = 3 | |
| 1201 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1201 | REG_DWORD = 3 | |
| 1206 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1206 | REG_DWORD = 3 | |
| 1209 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1209 | REG_DWORD = 3 | |
| 120b | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\120b | REG_DWORD = 3 | |
| 120c | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\120c | REG_DWORD = 3 | |
| 1400 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1400 | REG_DWORD = 3 | |
| 1402 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1402 | REG_DWORD = 3 | |
| 1405 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1405 | REG_DWORD = 3 | |
| 1406 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1406 | REG_DWORD = 3 | |
| 1407 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1407 | REG_DWORD = 3 | |
| 1409 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1409 | REG_DWORD = 0 | |
| 140C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\140C | REG_DWORD = 3 | |
| 1606 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1606 | REG_DWORD = 3 | |
| 1607 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1607 | REG_DWORD = 3 | |
| 1608 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1608 | REG_DWORD = 3 | |
| 160A | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\160A | REG_DWORD = 3 | |
| 1802 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1802 | REG_DWORD = 3 | |
| 1803 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1803 | REG_DWORD = 3 | |
| 1804 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1804 | REG_DWORD = 3 | |
| 1806 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1806 | REG_DWORD = 3 | |
| 1809 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1809 | REG_DWORD = 0 | |
| 1A00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1A00 | REG_DWORD = 196608 | |
| 1C00 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1C00 | REG_DWORD = 0 | |
| 2000 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2000 | REG_DWORD = 3 | |
| 2001 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2001 | REG_DWORD = 3 | |
| 2004 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2004 | REG_DWORD = 3 | |
| 2101 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2101 | REG_DWORD = 3 | |
| 2102 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2102 | REG_DWORD = 3 | |
| 2103 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2103 | REG_DWORD = 3 | |
| 2200 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2200 | REG_DWORD = 3 | |
| 2301 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2301 | REG_DWORD = 0 | |
| 2402 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2402 | REG_DWORD = 3 | |
| 2500 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500 | REG_DWORD = 0 | |
| 2708 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2708 | REG_DWORD = 3 | |
| 2709 | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2709 | REG_DWORD = 3 | |
| 270C | HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\270C | REG_DWORD = 0 |
133 of 564.