Restrict ActiveX Install: registry value groove.exe and 13 moreComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall
- Policy ID
- L_RestrictActiveXInstall
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2008 R2 or Windows 7
- Source
- Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
- Category
- Microsoft Office 2016 (Machine) › Security Settings › IE Security
Registry
groove.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- groove.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "groove.exe"=dword:00000001 ; Unchecked "groove.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "groove.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "groove.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'groove.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'groove.exe' -PropertyType DWord -Value 0 -Force | Out-Null
excel.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- excel.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "excel.exe"=dword:00000001 ; Unchecked "excel.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "excel.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "excel.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'excel.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'excel.exe' -PropertyType DWord -Value 0 -Force | Out-Null
mspub.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- mspub.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "mspub.exe"=dword:00000001 ; Unchecked "mspub.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "mspub.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "mspub.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'mspub.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'mspub.exe' -PropertyType DWord -Value 0 -Force | Out-Null
powerpnt.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- powerpnt.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "powerpnt.exe"=dword:00000001 ; Unchecked "powerpnt.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "powerpnt.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "powerpnt.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'powerpnt.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'powerpnt.exe' -PropertyType DWord -Value 0 -Force | Out-Null
pptview.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- pptview.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "pptview.exe"=dword:00000001 ; Unchecked "pptview.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "pptview.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "pptview.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'pptview.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'pptview.exe' -PropertyType DWord -Value 0 -Force | Out-Null
visio.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- visio.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "visio.exe"=dword:00000001 ; Unchecked "visio.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "visio.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "visio.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'visio.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'visio.exe' -PropertyType DWord -Value 0 -Force | Out-Null
winproj.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- winproj.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "winproj.exe"=dword:00000001 ; Unchecked "winproj.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "winproj.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "winproj.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'winproj.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'winproj.exe' -PropertyType DWord -Value 0 -Force | Out-Null
winword.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- winword.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "winword.exe"=dword:00000001 ; Unchecked "winword.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "winword.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "winword.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'winword.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'winword.exe' -PropertyType DWord -Value 0 -Force | Out-Null
outlook.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- outlook.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "outlook.exe"=dword:00000001 ; Unchecked "outlook.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "outlook.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "outlook.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'outlook.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'outlook.exe' -PropertyType DWord -Value 0 -Force | Out-Null
spdesign.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- spDesign.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "spdesign.exe"=dword:00000001 ; Unchecked "spdesign.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "spdesign.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "spdesign.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'spdesign.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'spdesign.exe' -PropertyType DWord -Value 0 -Force | Out-Null
exprwd.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- exprwd.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "exprwd.exe"=dword:00000001 ; Unchecked "exprwd.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "exprwd.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "exprwd.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'exprwd.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'exprwd.exe' -PropertyType DWord -Value 0 -Force | Out-Null
msaccess.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- msaccess.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "msaccess.exe"=dword:00000001 ; Unchecked "msaccess.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "msaccess.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "msaccess.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'msaccess.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'msaccess.exe' -PropertyType DWord -Value 0 -Force | Out-Null
onenote.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- onent.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "onenote.exe"=dword:00000001 ; Unchecked "onenote.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "onenote.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "onenote.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'onenote.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'onenote.exe' -PropertyType DWord -Value 0 -Force | Out-Null
mse7.exe
REG_DWORDComputerHKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall Current key
- Checked
- 1
- Unchecked
- 0
- Element
- mse7.exe
- Value type
- REG_DWORD
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall] ; Options (use only one) ; Checked "mse7.exe"=dword:00000001 ; Unchecked "mse7.exe"=dword:00000000
CMD
:: Options (use only one) :: Checked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "mse7.exe" /t REG_DWORD /d 1 /f :: Unchecked reg add "HKLM\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall" /v "mse7.exe" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Force | Out-Null # Options (use only one) # Checked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'mse7.exe' -PropertyType DWord -Value 1 -Force | Out-Null # Unchecked New-ItemProperty -Path 'HKLM:\software\microsoft\internet explorer\main\featurecontrol\feature_restrict_activexinstall' -Name 'mse7.exe' -PropertyType DWord -Value 0 -Force | Out-Null