Policy
Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
This policy setting prevents ActiveX controls from running in Protected Mode when Enhanced Protected Mode is enabled. When a user has an ActiveX control installed that is not compatible with Enhanced Protected Mode and a website attempts to load the control, Internet Explorer notifies the user and gives the option to run the website in regular Protected Mode. This policy setting disables this notification and forces all websites to run in Enhanced Protected Mode. Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system. When Enhanced Protected Mode is enabled, and a user encounters a website that attempts to load an ActiveX control that is not compatible with Enhanced Protected Mode, Internet Explorer notifies the user and gives the option to disable Enhanced Protected Mode for that particular website. If you enable this policy setting, Internet Explorer will not give the user the option to disable Enhanced Protected Mode. All Protected Mode websites will run in Enhanced Protected Mode. If you disable or do not configure this policy setting, Internet Explorer notifies users and provides an option to run websites with incompatible ActiveX controls in regular Protected Mode. This is the default behavior.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKCU\Software\Policies\Microsoft\Internet Explorer\Main\DisableEPMCompat | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- UserAllow active content from CDs to run on user machinesAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- ComputerAllow active content from CDs to run on user machinesAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- UserAllow Install On Demand (except Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Install On Demand (except Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Install On Demand (Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- UserAllow Install On Demand (Internet Explorer)Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
- ComputerAllow Internet Explorer to use the HTTP2 network protocolAt least Internet Explorer 11.0 on Windows 10
- UserAllow Internet Explorer to use the HTTP2 network protocolAt least Internet Explorer 11.0 on Windows 10
- ComputerAllow Internet Explorer to use the SPDY/3 network protocolOnly Internet Explorer 11.0 on Windows 8.1
- UserAllow Internet Explorer to use the SPDY/3 network protocolOnly Internet Explorer 11.0 on Windows 8.1
- ComputerAllow software to run or install even if the signature is invalidAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
- UserAllow software to run or install even if the signature is invalidAt least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1