Check OLE objects
Jump to overview

Policy overview

Key metadata and intent for this policy.

User
Category
Microsoft Office 2016 > Security Settings
Supported on
Windows7

This policy setting determines whether Office checks that an OLE object is properly categorized before loading it. If you enable this policy setting, you can select one of the following options: - Do not check: Office loads OLE objects without checking if they are properly categorized. - Override IE kill bit list: Office uses the category list to override IE kill bit checks. (This is also the default behavior for this policy setting). - Strict allow list: Office only loads properly categorized OLE objects. If you disable or do not configure this policy setting, Office uses the category list to override IE kill bit checks.

Internal name
L_CheckOLEObjects
Policy ID
91dfcc24661e
Elements
1

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ScopeElementTypeRegistry mappingConstraints & behaviorCopy
User
L_CheckOLEObjectsDropID
ID L_CheckOLEObjectsDropID
enum
Path
software\policies\microsoft\office\16.0\common\com categories
Value name
checkofficeole
Type
REG_DWORD
Options: Do not check (0), Override IE kill bit list (1), Strict allow list (2)
L_CheckOLEObjectsDropID
User · Type enum
Registry mapping
Path
software\policies\microsoft\office\16.0\common\com categories
Value name
checkofficeole
Type
REG_DWORD
Details
Options: Do not check (0), Override IE kill bit list (1), Strict allow list (2)