About this update
- Know when Internet Explorer prevents a webpage from loading common but out-of-date ActiveX controls.
- Interact with parts of a webpage that are unaffected by out-of-date ActiveX controls.
- Update out-of-date ActiveX controls so that they are up to date and safer to use.
- Inventory the ActiveX controls that your organization is using.
- This feature was first introduced in the August cumulative security update for Internet Explorer (MS14-051) on Windows 7 SP1 and later versions. Support for Internet Explorer 9 was later added for Windows Vista SP2 and Windows Server 2008 SP2 as part of the November cumulative security update for Internet Explorer (MS14-065) .
- Although the August cumulative security update for Internet Explorer (MS14-051) enabled this capability, out-of-date ActiveX controls began to be blocked on September 9, 2014, to provide organizations time to identify and resolve dependencies. For more information, see the More information section.
- The Internet Explorer administrative templates were updated with four new Group Policy settings to support out-of-date ActiveX control blocking. You can download the updated Internet Explorer administrative templates here. A fifth manageability setting was later exposed through the registry. You can learn more about this setting here .
- It can take up to twelve hours from the time that you configure the feature for it to be fully functional in Internet Explorer.
- Internet Explorer versions 8 through 11 on Windows 7 SP1 and later versions
- Internet Explorer versions 8 through 11 on Windows Server 2008 R2 SP1 and later versions
- Internet Explorer 9 on Windows Server 2008 SP2 and Windows Vista SP2
- All security zones except the Local Intranet Zone and the Trusted Sites Zone
List of blocked ActiveX controls
Internet Explorer begins blocking out-of-date ActiveX controls
Updated Group Policy Settings
Update informationFor information about how to install the most recent cumulative security update for Internet Explorer, read the instructions on Microsoft Update. Additionally, see the technical information about the most recent cumulative security update for Internet Explorer.
Testing the out-of-date ActiveX controls featureIf your organization has a dependency on outdated versions of ActiveX controls that are being blocked by this feature, you can test the feature by following these steps:
- On a test computer, install the most recent cumulative update for Internet Explorer.
- Copy the current VersionList.xml file from here to the following location: %LOCALAPPDATA%\Microsoft\Internet Explorer\VersionManager\versionlist.xmlNote If you are asked to overwrite the existing file, you should agree.
- Restart Internet Explorer. You should see that websites that try to load outdated ActiveX controls will now display the out-of-date ActiveX control blocking notification.