Check OLE objects

This policy setting determines whether Office checks that an OLE object is properly categorized before loading it. If you enable this policy setting, you can select one of the following options: - Do not check: Office loads OLE objects without checking if they are properly categorized. - Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). - Strict allow list: Office only loads properly categorized OLE objects. If you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks.

No explicit registry values are set for enabled or disabled states.

• User
  ActiveX Control Initialization

  Windows7
• User
  Allow Basic Authentication prompts from network proxies

  Windows7
• User
  Allow file extensions for OLE embedding

  Windows7
• User
  Allow root or intermediate certificates as VBA trusted publishers

  Windows 10
• User
  Allow specified hosts to show Basic Authentication prompts to Office apps

  Windows7
• User
  Allow VBA to load typelib references by path from untrusted intranet locations

  Windows 10
• User
  Automation Security

  Windows7
• User
  Block additional file extensions for OLE embedding

  Windows7
• User
  Block all internet macros (ignore trusted locations or publishers)

  Windows 10
• User
  Block Insecure Protocols

  Windows7
• User
  Block loading of COM/VSTO add-ins registered in HKCU

  Windows 10
• User
  Block OLE Graph

  Windows7