• Step-by-Step: Disable Active Scripting in Internet Explorer

    by  • August 5, 2009 • Web Browser Security

    Click_on_tools

    Click on Tools on the menu bar at the top of the Internet Explorer web browser window.

    Internet_Options

    On the Tools drop-down list, select Internet Options.

    Security_Tab

    At the top of the Internet Options console, click on the Security tab.

    Select_Zone

    Select the Security Zone you wish to disable Active Scripting for- Internet, Local Intranet or Restricted.

    High_Security

    Selecting the Default Level High will automatically disable Active Scripting, but may be too restrictive.

    Note: Local Intranet security zone includes only those sites from your own Intranet, or local network, so it should be safe on Medium or Low

    Internet security zone should be set to High or Medium with Active Scripting turned off

    Choose_Medium

    You may opt to use Default Level Medium as a baseline and customize it.

    • Select the Custom Level button
    • Choose Medium from the Reset to: drop-down list

    Reset
    Set Reset Custom Settings to Medium and click the Reset button.

    ActiveX

    Set the options under ActiveX Controls and Plug-ins to Disable Note: Disabling ActiveX may make some sites stop functioning properly. More advanced users may want to set these options for Prompt which will cause Internet Explorer to notify the user when Active Scripting attemtps to execute and let the user decide whether to allow it or not.

    Trusted_Sites

    If you disable ActiveX and encounter sites that you are positive are safe that require Active Scripting to function you can add them to the Trusted Sites zone.

    Sites listed under Trusted Sites follow the security profile for Trusted Sites regardless of what Security Zone they would normally be in.

    Note: Trusted Sites security zone can be set to Default Level Medium or Low

    Restricted_Sites

    If you encounter sites that contain malicious code you can add them to the Restricted Sites zone. Sites listed under Restricted Sites follow the Restricted Sites security profile regardless of what Security Zone they would normally be in. Note: Restricted Sites security zone should be set to the Default Level High

    About

    Tony has driven security policies and technologies for antivirus and incident response for Fortune 500 companies, and he has been network administrator and technical support for smaller companies. He has written for a variety of other Web sites and publications, including BizTech Magazine, PC World, SearchSecurity.com, WindowsNetworking.com, Smart Computing magazine, and Information Security magazine. Tony is a CISSP (Certified Information Systems Security Professional) and ISSAP (Information Systems Security Architecture Professional). He is Microsoft Certified as an MCSE (Microsoft Certified Systems Engineer) and MCSA (Microsoft Certified Systems Administrator) in Windows 2000 and an MCP (Microsoft Certified Professional) in Windows NT. Tony has been recognized by Microsoft as an MVP (Most Valuable Professional) in Windows security since 2006. In addition to his Web site and magazine contributions, Tony was also tech editor of PCI Compliance (ISBN: 1597491659 ) and author of Essential Computer Security: Everyone’s Guide to E-mail, Internet, and Wireless Security (ISBN: 1597491144), coauthor of Hacker’s Challenge 3 (ISBN: 0072263040) and a contributing author to Winternals: Defragmentation, Recovery, and Administration Field Guide (ISBN: 1597490792), Combating Spyware in the Enterprise (ISBN: 1597490644) Syngress Force 2006 Emerging Threat Analysis: From Mischief to Malicious (ISBN: 1597490563), Botnets: The Killer Web Applications (ISBN: 1597491357), and AVIEN Malware Defense Guide for the Enterprise (ISBN: 1597491640).

    http://www.tonybradley.com