Fixing after WDCML conversion

This commit is contained in:
LizRoss 2016-02-26 14:00:32 -08:00
parent 7547456c34
commit 1d078b66a5

View File

@ -1,13 +1,15 @@
--- ---
Description: 'ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars.' Description: Use out-of-date ActiveX control blocking to help you know when IE prevents a webpage from loading outdated ActiveX controls and to update the outdated control, so that its safer to use.
MS-HAID: 'p\_ie11deploy.out\_of\_date\_activex\_control\_blocking' ms.assetid: e61866bb-1ff1-4a8d-96f2-61d3534e8199
MSHAttr: 'PreferredLib:/library' ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Out-of-date ActiveX control blocking (Internet Explorer 11 for IT Pros) title: Out-of-date ActiveX control blocking (Internet Explorer 11 for IT Pros)
--- ---
# Out-of-date ActiveX control blocking # Out-of-date ActiveX control blocking
**Last updated** **Last updated**
- November 12, 2015 - November 12, 2015
@ -35,57 +37,19 @@ The out-of-date ActiveX control blocking feature works with all [Security Zones]
It also works with these operating system and IE combinations: It also works with these operating system and IE combinations:
<table> |Windows operating system |IE version |
<colgroup> |----------------------------------------|---------------------------------|
<col width="50%" /> |Windows 10 |All supported versions of IE.<br>Microsoft Edge doesn't support ActiveX controls. |
<col width="50%" /> |Windows 8.1 and Windows 8.1 Update |All supported versions of IE |
</colgroup> |Windows 7 SP1 |All supported versions of IE |
<thead> |Windows Server 2012 |All supported versions of IE |
<tr class="header"> |Windows Server 2008 R2 SP1 |All supported versions of IE |
<th align="left">Windows operating system</th> |Windows Server 2008 SP2 |Windows Internet Explorer 9 only |
<th align="left">IE version</th> |Windows Vista SP2 |Windows Internet Explorer 9 only |
</tr>
</thead> For more info about this new feature, see the [Internet Explorer begins blocking out-of-date ActiveX controls](http://go.microsoft.com/fwlink/p/?LinkId=507691) blog. To see the complete list of out-of-date Active controls blocked by this feature, see [Blocked out-of-date ActiveX controls](http://go.microsoft.com/fwlink/p/?LinkId=517023).
<tbody>
<tr class="odd">
<td align="left"><p>Windows 10</p></td>
<td align="left"><p>All supported versions of IE.</p>
<p>Microsoft Edge doesn't support ActiveX controls.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows 8.1 and Windows 8.1 Update</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Windows 7 SP1</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Server 2012</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Windows Server 2008 R2 SP1</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Server 2008 SP2</p></td>
<td align="left"><p>Windows Internet Explorer 9 only</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Vista SP2</p></td>
<td align="left"><p>Windows Internet Explorer 9 only</p></td>
</tr>
</tbody>
</table>
 
For more info about this new feature, see [Internet Explorer begins blocking out-of-date ActiveX controls](http://go.microsoft.com/fwlink/p/?LinkId=507691) blog. To see the complete list of out-of-date Active controls blocked by this feature, go [here](http://go.microsoft.com/fwlink/p/?LinkId=517023).
## What does the out-of-date ActiveX control blocking notification look like? ## What does the out-of-date ActiveX control blocking notification look like?
When IE blocks an outdated ActiveX control, youll see a notification bar similar to this, depending on your version of IE: When IE blocks an outdated ActiveX control, youll see a notification bar similar to this, depending on your version of IE:
**Internet Explorer 9 through Internet Explorer 11** **Internet Explorer 9 through Internet Explorer 11**
@ -94,133 +58,66 @@ When IE blocks an outdated ActiveX control, youll see a notification bar simi
**Windows Internet Explorer 8** **Windows Internet Explorer 8**
![warning about outdated activex controls (ie8)](images/ieoutdatedcontrolwarning.png) ![warning about outdated activex controls (ie8)](images/ieoutdatedcontrolwarning.png)
Out-of-date ActiveX control blocking also gives you a security warning that tells you if a webpage tries to launch specific outdated apps, outside of IE: Out-of-date ActiveX control blocking also gives you a security warning that tells you if a webpage tries to launch specific outdated apps, outside of IE:
![warning about outdated activex controls outside ie](images/ieoutdatedcontroloutsideofie.png) ![warning about outdated activex controls outside ie](images/ieoutdatedcontroloutsideofie.png)
## How do I fix an outdated ActiveX control or app? ## How do I fix an outdated ActiveX control or app?
From the notification about the outdated ActiveX control, you can go to the controls website to download its latest version. From the notification about the outdated ActiveX control, you can go to the controls website to download its latest version.
![](../common/wedge.gif)**To get the updated ActiveX control** **To get the updated ActiveX control**
1. From the notification bar, tap or click **Update**. 1. From the notification bar, tap or click **Update**.<p>
IE opens the ActiveX controls website.
IE opens the ActiveX controls website.
2. Download the latest version of the control. 2. Download the latest version of the control.
**Security Note:  ** **Security Note:**<br>If you dont fully trust a site, you shouldnt allow it to load an outdated ActiveX control. However, although we dont recommend it, you can view the missing webpage content by tapping or clicking **Run this time**. This option runs the ActiveX control without updating or fixing the problem. The next time you visit a webpage running the same outdated ActiveX control, youll get the notification again.
If you dont fully trust a site, you shouldnt allow it to load an outdated ActiveX control. However, although we dont recommend it, you can view the missing webpage content by tapping or clicking **Run this time**. This option runs the ActiveX control without updating or fixing the problem. The next time you visit a webpage running the same outdated ActiveX control, youll get the notification again. **To get the updated app**
![](../common/wedge.gif)**To get the updated app** 1. From the security warning, tap or click **Update** link.<p>
IE opens the apps website.
1. From the security warning, tap or click **Update** link.
IE opens the apps website.
2. Download the latest version of the app. 2. Download the latest version of the app.
**Security Note:  ** **Security Note:**<br>If you dont fully trust a site, you shouldnt allow it to launch an outdated app. However, although we dont recommend it, you can let the webpage launch the app by tapping or clicking **Allow**. This option opens the app without updating or fixing the problem. The next time you visit a webpage running the same outdated app, youll get the notification again.
If you dont fully trust a site, you shouldnt allow it to launch an outdated app. However, although we dont recommend it, you can let the webpage launch the app by tapping or clicking **Allow**. This option opens the app without updating or fixing the problem. The next time you visit a webpage running the same outdated app, youll get the notification again.
## How does IE decide which ActiveX controls to block? ## How does IE decide which ActiveX controls to block?
IE uses Microsofts versionlist.xml file to determine whether an ActiveX control should be stopped from loading. This file is updated with newly-discovered out-of-date ActiveX controls, which IE automatically downloads to your local copy of the file. IE uses Microsofts versionlist.xml file to determine whether an ActiveX control should be stopped from loading. This file is updated with newly-discovered out-of-date ActiveX controls, which IE automatically downloads to your local copy of the file.
You can see your copy of the versionlist.xml file here `%LOCALAPPDATA%\Microsoft\Internet Explorer\VersionManager\versionlist.xml`, or you can view Microsofts version at [Internet Explorer version list](http://go.microsoft.com/fwlink/p/?LinkId=403864). You can see your copy of the versionlist.xml file here `%LOCALAPPDATA%\Microsoft\Internet Explorer\VersionManager\versionlist.xml`, or you can view Microsofts version at [Internet Explorer version list](http://go.microsoft.com/fwlink/p/?LinkId=403864).
**Security Note:  ** **Security Note:**<br>Although we bly recommend against it, if you dont want your computer to automatically download the updated version list from Microsoft, run the following command from a command prompt:
Although we strongly recommend against it, if you dont want your computer to automatically download the updated version list from Microsoft, run the following command from a command prompt:
`reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v DownloadVersionList /t REG_DWORD /d 0 /f`
```
reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v DownloadVersionList /t REG_DWORD /d 0 /f
```
Turning off this automatic download breaks the out-of-date ActiveX control blocking feature by not letting the version list update with newly outdated controls, potentially compromising the security of your computer. Use this configuration option at your own risk. Turning off this automatic download breaks the out-of-date ActiveX control blocking feature by not letting the version list update with newly outdated controls, potentially compromising the security of your computer. Use this configuration option at your own risk.
## Out-of-date ActiveX control blocking on managed devices ## Out-of-date ActiveX control blocking on managed devices
Out-of-date ActiveX control blocking includes 4 new Group Policy settings that you can use to manage your web browser configuration, based on your domain controller. You can download the administrative templates, including the new settings, from the [Administrative Templates for Internet Explorer](http://go.microsoft.com/fwlink/p/?LinkId=444484) page. Out-of-date ActiveX control blocking includes 4 new Group Policy settings that you can use to manage your web browser configuration, based on your domain controller. You can download the administrative templates, including the new settings, from the [Administrative Templates for Internet Explorer](http://go.microsoft.com/fwlink/p/?LinkId=444484) page.
### Group Policy settings ### Group Policy settings
Heres a list of the new Group Policy info, including the settings, location, requirements, and Help text strings. All of these settings can be set in either the Computer Configuration or User Configuration scope, but Computer Configuration takes precedence over User Configuration. Heres a list of the new Group Policy info, including the settings, location, requirements, and Help text strings. All of these settings can be set in either the Computer Configuration or User Configuration scope, but Computer Configuration takes precedence over User Configuration.
**Important**   **Important**<br>
Out-of-date ActiveX control blocking is turned off in the Local Intranet Zone; therefore, intranet websites and line-of-business apps will continue to use out-of-date ActiveX controls without disruption. Out-of-date ActiveX control blocking is turned off in the Local Intranet Zone; therefore, intranet websites and line-of-business apps will continue to use out-of-date ActiveX controls without disruption.
  |Setting |Category path |Supported on |Help text |
|--------|--------------|-------------|----------|
<table> |Turn on ActiveX control logging in IE |`Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management` |Internet Explorer 8 through IE11 |This setting determines whether IE saves log information for ActiveX controls.<p>If you enable this setting, IE logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.<p>If you disable or don't configure this setting, IE won't log ActiveX control information.<p>Note that you can turn this setting on or off regardless of the <b>Turn off blocking of outdated ActiveX controls for IE</b> or <b>Turn off blocking of outdated ActiveX controls for IE on specific domains</b> settings. |
<colgroup> |Remove the <b>Run this time</b> button for outdated ActiveX controls in IE |`Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management`|Internet Explorer 8 through IE11 |This setting allows you stop users from seeing the <b>Run this time</b> button and from running specific outdated ActiveX controls in IE.<p>If you enable this setting, users won't see the <b>Run this time</b> button on the warning message that appears when IE blocks an outdated ActiveX control.<p>If you disable or don't configure this setting, users will see the <b>Run this time</b> button on the warning message that appears when IE blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once. |
<col width="25%" /> |Turn off blocking of outdated ActiveX controls for IE on specific domains |`Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management` |Internet Explorer 8 through IE11 |This setting allows you to manage a list of domains on which IE will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.<p>If you enable this setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in IE. Each domain entry must be formatted like one of the following:<ul><li><b>&quot;domainname.TLD&quot;.</b> For example, if you want to include *.contoso.com/*, use &quot;contoso.com&quot;.</li><li><b>&quot;hostname&quot;.</b> For example, if you want to include http://example, use &quot;example&quot;.</li><li><b>&quot;file:///path/filename.htm&quot;.</b> For example, use file:///C:/Users/contoso/Desktop/index.htm.</li></ul><p>If you disable or don't configure this setting, the list is deleted and IE continues to block specific outdated ActiveX controls on all domains in the Internet Zone. |
<col width="25%" /> |Turn off blocking of outdated ActiveX controls for IE |`Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management` |Internet Explorer 8 through IE11 |This setting determines whether IE blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.<p>If you enable this setting, IE stops blocking outdated ActiveX controls.<p>If you disable or don't configure this setting, IE continues to block specific outdated ActiveX controls. |
<col width="25%" /> |Remove the <b>Update</b> button in the out-of-date ActiveX control blocking notification for IE |This functionality is only available through the registry |Internet Explorer 8 through IE11 |This setting determines whether the out-of-date ActiveX control blocking notification shows the **Update** button. This button points users to update specific out-of-date ActiveX controls in IE. |
<col width="25%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Setting</th>
<th align="left">Category path</th>
<th align="left">Supported on</th>
<th align="left">Help text</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Turn on ActiveX control logging in IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether IE saves log information for ActiveX controls.</p>
<p>If you enable this setting, IE logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.</p>
<p>If you disable or don't configure this setting, IE won't log ActiveX control information.</p>
<p>Note that you can turn this setting on or off regardless of the <strong>Turn off blocking of outdated ActiveX controls for IE</strong> or <strong>Turn off blocking of outdated ActiveX controls for IE on specific domains</strong> settings.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Remove the <strong>Run this time</strong> button for outdated ActiveX controls in IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting allows you stop users from seeing the <strong>Run this time</strong> button and from running specific outdated ActiveX controls in IE.</p>
<p>If you enable this setting, users won't see the <strong>Run this time</strong> button on the warning message that appears when IE blocks an outdated ActiveX control.</p>
<p>If you disable or don't configure this setting, users will see the <strong>Run this time</strong> button on the warning message that appears when IE blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE on specific domains</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting allows you to manage a list of domains on which IE will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.</p>
<p>If you enable this setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in IE. Each domain entry must be formatted like one of the following:</p>
<ul>
<li><p><strong>&quot;domainname.TLD&quot;.</strong> For example, if you want to include *.contoso.com/*, use &quot;contoso.com&quot;.</p></li>
<li><p><strong>&quot;hostname&quot;.</strong> For example, if you want to include http://example, use &quot;example&quot;.</p></li>
<li><p><strong>&quot;file:///path/filename.htm&quot;.</strong> For example, use file:///C:/Users/contoso/Desktop/index.htm.</p></li>
</ul>
<p>If you disable or don't configure this setting, the list is deleted and IE continues to block specific outdated ActiveX controls on all domains in the Internet Zone.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether IE blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.</p>
<p>If you enable this setting, IE stops blocking outdated ActiveX controls.</p>
<p>If you disable or don't configure this setting, IE continues to block specific outdated ActiveX controls.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Remove the <strong>Update</strong> button in the out-of-date ActiveX control blocking notification for IE</p></td>
<td align="left"><p>This functionality is only available through the registry</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether the out-of-date ActiveX control blocking notification shows the <strong>Update</strong> button. This button points users to update specific out-of-date ActiveX controls in IE.</p></td>
</tr>
</tbody>
</table>
 
If you don't want to use Group Policy, you can also turn these settings on or off using the registry. You can update the registry manually or you can use an elevated command prompt and these commands to automatically turn on the settings. If you don't want to use Group Policy, you can also turn these settings on or off using the registry. You can update the registry manually or you can use an elevated command prompt and these commands to automatically turn on the settings.
|Setting |Registry setting |
|-------------------------|----------------------------------------------------------------|
|Turn on ActiveX control logging in IE |`reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v AuditModeEnabled /t REG_DWORD /d 1 /f`
<table> <table>
<colgroup> <colgroup>
@ -235,46 +132,46 @@ If you don't want to use Group Policy, you can also turn these settings on or of
</thead> </thead>
<tbody> <tbody>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Turn on ActiveX control logging in IE</p></td> <td align="left"><p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v AuditModeEnabled /t REG_DWORD /d 1 /f</code></p> <td align="left"><p><code></code>
<p>Where:</p> <p>Where:
<ul> <ul>
<li><p><strong>0 or not configured</strong> = Logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.</p></li> <li><p><b>0 or not configured</b> = Logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.</li>
<li><p><strong>1</strong> = Logs ActiveX control information.</p></li> <li><p><b>1</b> = Logs ActiveX control information.</li>
</ul></td> </ul></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Remove <strong>Run this time</strong> button for outdated ActiveX controls in IE</p></td> <td align="left"><p>Remove <b>Run this time</b> button for outdated ActiveX controls in IE</td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v RunThisTimeEnabled /t REG_DWORD /d 0 /f</code></p> <td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v RunThisTimeEnabled /t REG_DWORD /d 0 /f</code>
<p>Where:</p> <p>Where:
<ul> <ul>
<li><p><strong>0</strong> = Removes the <strong>Run this time</strong> button.</p></li> <li><p><b>0</b> = Removes the <b>Run this time</b> button.</li>
<li><p><strong>1 or not configured</strong> = Leaves the <strong>Run this time</strong> button.</p></li> <li><p><b>1 or not configured</b> = Leaves the <b>Run this time</b> button.</li>
</ul></td> </ul></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE on specific domains</p></td> <td align="left"><p>Turn off blocking of outdated ActiveX controls for IE on specific domains</td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain&quot; /v contoso.com /t REG_SZ /f</code></p> <td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain&quot; /v contoso.com /t REG_SZ /f</code>
<p>Where:</p> <p>Where:
<ul> <ul>
<li><p><strong>contoso.com</strong> = A single domain on which outdated ActiveX controls won't be blocked in IE. Use a new <code>reg add</code> command for each domain you wish to add to the Allow list.</p></li> <li><p><b>contoso.com</b> = A single domain on which outdated ActiveX controls won't be blocked in IE. Use a new <code>reg add</code> command for each domain you wish to add to the Allow list.</li>
</ul></td> </ul></td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE</p></td> <td align="left"><p>Turn off blocking of outdated ActiveX controls for IE</td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v VersionCheckEnabled /t REG_DWORD /d 0 /f</code></p> <td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v VersionCheckEnabled /t REG_DWORD /d 0 /f</code>
<p>Where:</p> <p>Where:
<ul> <ul>
<li><p><strong>0</strong> = Stops blocking outdated ActiveX controls.</p></li> <li><p><b>0</b> = Stops blocking outdated ActiveX controls.</li>
<li><p><strong>1 or not configured</strong> = Continues to block specific outdated ActiveX controls.</p></li> <li><p><b>1 or not configured</b> = Continues to block specific outdated ActiveX controls.</li>
</ul></td> </ul></td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Remove the <strong>Update</strong> button in the out-of-date ActiveX control blocking notification for IE</p></td> <td align="left"><p>Remove the <b>Update</b> button in the out-of-date ActiveX control blocking notification for IE</td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Internet Explorer\VersionManager&quot; /v UpdateEnabled /t REG_DWORD /d 0 /f</code></p> <td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Internet Explorer\VersionManager&quot; /v UpdateEnabled /t REG_DWORD /d 0 /f</code>
<ul> <ul>
<li><p><strong>0</strong> = Removes the <strong>Update</strong> button.</p></li> <li><p><b>0</b> = Removes the <b>Update</b> button.</li>
<li><p><strong>1 or not configured</strong> = Leaves the <strong>Update</strong> button.</p></li> <li><p><b>1 or not configured</b> = Leaves the <b>Update</b> button.</li>
</ul></td> </ul></td>
</tr> </tr>
</tbody> </tbody>
@ -320,22 +217,22 @@ Heres a detailed example and description of whats included in the VersionA
</thead> </thead>
<tbody> <tbody>
<tr class="odd"> <tr class="odd">
<td align="left"><p>http://contoso.com/test1.html</p></td> <td align="left"><p>http://contoso.com/test1.html</td>
<td align="left"><p>C:\Windows\System32\Macromed\Flash\Flash.ocx</p></td> <td align="left"><p>C:\Windows\System32\Macromed\Flash\Flash.ocx</td>
<td align="left"><p>14.0.0.125</p></td> <td align="left"><p>14.0.0.125</td>
<td align="left"><p>14.0.0.125</p></td> <td align="left"><p>14.0.0.125</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>Not in blocklist</p></td> <td align="left"><p>Not in blocklist</td>
<td align="left"><p>EPM compatible</p></td> <td align="left"><p>EPM compatible</td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>http://contoso.com/test2.html</p></td> <td align="left"><p>http://contoso.com/test2.html</td>
<td align="left"><p>C:\Program Files\Java\jre6\bin\jp2iexp.dll</p></td> <td align="left"><p>C:\Program Files\Java\jre6\bin\jp2iexp.dll</td>
<td align="left"><p>6.0.410.2</p></td> <td align="left"><p>6.0.410.2</td>
<td align="left"><p>6.0.410.2</p></td> <td align="left"><p>6.0.410.2</td>
<td align="left"><p>Blocked</p></td> <td align="left"><p>Blocked</td>
<td align="left"><p>Out of date</p></td> <td align="left"><p>Out of date</td>
<td align="left"><p>Not EPM compatible</p></td> <td align="left"><p>Not EPM compatible</td>
</tr> </tr>
</tbody> </tbody>
</table> </table>
@ -369,49 +266,49 @@ Heres a detailed example and description of whats included in the VersionA
</thead> </thead>
<tbody> <tbody>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Version not in blocklist</p></td> <td align="left"><p>Version not in blocklist</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The version of the loaded ActiveX control is explicitly allowed by the IE version list.</p></td> <td align="left"><p>The version of the loaded ActiveX control is explicitly allowed by the IE version list.</td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Trusted domain</p></td> <td align="left"><p>Trusted domain</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The ActiveX control was loaded on a domain listed in the <strong>Turn off blocking of outdated ActiveX controls for IE on specific domains</strong> setting.</p></td> <td align="left"><p>The ActiveX control was loaded on a domain listed in the <b>Turn off blocking of outdated ActiveX controls for IE on specific domains</b> setting.</td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>File doesnt exist</p></td> <td align="left"><p>File doesnt exist</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The loaded ActiveX control is missing required binaries to run correctly.</p></td> <td align="left"><p>The loaded ActiveX control is missing required binaries to run correctly.</td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Out-of-date</p></td> <td align="left"><p>Out-of-date</td>
<td align="left"><p>Blocked</p></td> <td align="left"><p>Blocked</td>
<td align="left"><p>The loaded ActiveX control is explicitly blocked by the IE version list because it is out-of-date.</p></td> <td align="left"><p>The loaded ActiveX control is explicitly blocked by the IE version list because it is out-of-date.</td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Not in blocklist</p></td> <td align="left"><p>Not in blocklist</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The loaded ActiveX control isnt in the IE version list.</p></td> <td align="left"><p>The loaded ActiveX control isnt in the IE version list.</td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Managed by policy</p></td> <td align="left"><p>Managed by policy</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The loaded ActiveX control is managed by a Group Policy setting that isnt listed here, and will be managed in accordance with that Group Policy setting.</p></td> <td align="left"><p>The loaded ActiveX control is managed by a Group Policy setting that isnt listed here, and will be managed in accordance with that Group Policy setting.</td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Trusted Site Zone or intranet</p></td> <td align="left"><p>Trusted Site Zone or intranet</td>
<td align="left"><p>Allowed</p></td> <td align="left"><p>Allowed</td>
<td align="left"><p>The ActiveX control was loaded in the Trusted Sites Zone or the Local Intranet Zone.</p></td> <td align="left"><p>The ActiveX control was loaded in the Trusted Sites Zone or the Local Intranet Zone.</td>
</tr> </tr>
<tr class="even"> <tr class="even">
<td align="left"><p>Hardblocked</p></td> <td align="left"><p>Hardblocked</td>
<td align="left"><p>Blocked</p></td> <td align="left"><p>Blocked</td>
<td align="left"><p>The loaded ActiveX control is blocked in IE because it contains known security vulnerabilities.</p></td> <td align="left"><p>The loaded ActiveX control is blocked in IE because it contains known security vulnerabilities.</td>
</tr> </tr>
<tr class="odd"> <tr class="odd">
<td align="left"><p>Unknown</p></td> <td align="left"><p>Unknown</td>
<td align="left"><p>Allowed or blocked</p></td> <td align="left"><p>Allowed or blocked</td>
<td align="left"><p>None of the above apply.</p></td> <td align="left"><p>None of the above apply.</td>
</tr> </tr>
</tbody> </tbody>
</table> </table>