Prevent ignoring certificate errors

Policy ID: NoCertError
Scope: Computer Configuration, User Configuration
Supported on: At least Internet Explorer 7.0
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › Internet Explorer › Internet Control Panel

Description

This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt browsing (such as "expired", "revoked", or "name mismatch" errors) in Internet Explorer.

If you enable this policy setting, the user cannot continue browsing.

If you disable or do not configure this policy setting, the user can choose to ignore certificate errors and continue browsing.

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings View registry values

PreventIgnoreCertErrorsREG_DWORD

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings View registry values

PreventIgnoreCertErrorsREG_DWORD

Other policies in the same category

View all policies in this category (10)