Policy
Disable changing certificate settings
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers. If you enable this policy, the settings in the Certificates area on the Content tab in the Internet Options dialog box appear dimmed. If you disable this policy or do not configure it, users can import new certificates, remove approved publishers, and change settings for certificates that have already been accepted. The "Disable the Content page" policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Content tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored. Caution: If you enable this policy, users can still run the Certificate Manager Import Wizard by double-clicking a software publishing certificate (.spc) file. This wizard enables users to import and configure settings for certificates from software publishers that haven't already been configured for Internet Explorer.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| User | Path Software\Policies\Microsoft\Internet Explorer\Control Panel Value name Certificates | REG_DWORD | HKCU 1 | HKCU 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.