Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Internet Control Panel->Security Page->Locked-Down Intranet Zone

Turn Off First-Run Opt-In

Allow Scriptlets

Disable WinFX Runtime components Setup

Web Browser Applications

XPS files

Loose or un-compiled XAML files

Turn on Protect Mode

Allow video and animation on a webpage that does not use external media player (through dynsrc attribute)

Allow status bar updates via script

Run .Net Framework-reliant components signed with Authenticode

Run .Net Framework-reliant components not signed with Authenticode

Download signed ActiveX controls

Download unsigned ActiveX controls

Initialize and script ActiveX controls not marked as safe

Run ActiveX controls marked safe for scripting

Allow file downloads

Allow font downloads

Java permissions

Access data sources across domains

Automatic prompting for file downloads

Automatic prompting for ActiveX controls

Allow META REFRESH

Allow script-initiated windows without size or position constraints

Allow binary and script behaviors

Display mixed content

Do not prompt for client certificate selection when no certificates or only one certificate exists

Allow drag and drop or copy and paste files

Allow installation of desktop items

Launching applications and files in an IFRAME

Navigate sub-frames across different domains

Open files based on content, not file extension

Software channel permissions

Submit non-encrypted form data

Use Pop-up Blocker

Userdata persistence

Web sites in less privileged Web content zones can navigate into this zone

Allow active scripting

Allow cut, copy

or paste operations from the clipboard via script

Scripting of Java applets

Logon options

Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Internet Control Panel->Security Page

Turn on automatic detection of the Intranet

Turn on Information bar notification for intranet Content

Site to Zone assignment List

Intranet Sites: Include all local (intranet sites not listed in other

Intranet Sites: Include all sites

that bypass the proxy server

Intranet Sites: Include all network paths (UNCs)

Internet Zone Template

Intranet Zone Template

Trusted Sites Zone Template

Local Machine Zone Template

Locked-Down Local Machine Zone Template

Locked-Down Internet Zone Template

Locked-Down Intranet Zone Template

Locked-Down Trusted Zone Template

Locked-Down Trusted Sites Zone Template

Locked-Down Restricted Sites Zone Template