This step-by-step article describes how to set Java security in Internet Explorer. You can configure Internet Explorer 4.0 and later with default security settings or with custom security settings. The custom security settings explicitly define Java permissions for signed and unsigned applets. The Microsoft Virtual Machine must be installed to configure the custom Java permissions.
View and Change Java Custom Settings for Each Security Zone
To configure Java security in Internet Explorer:
Start Internet Explorer, and then click Internet Options on the Tools menu.
In the Internet Options dialog box, click the Security tab.
There are four security zones on the Security page:
Select the zone on which you want to change the Java security settings.
In the Security level for this zone frame, click Custom Level. In Internet Explorer version 4.x, click Custom Level, and then click Settings.
View the Microsoft VM section (the Java section in Internet Explorer 4.x.)
In the list of Java Permissions under the Microsoft VM, click Custom.
Click Java Custom Settings.
Click the View Permissions tab to view the current Java permissions. The Java permissions are grouped in three main categories:
Permissions Given to Unsigned Content Unsigned Java applets that request these permissions can run without bringing up a user prompt.
Permissions That Signed Content Are Allowed Signed Java applets that requests these permissions can run without user prompting.
Permissions That Signed Content Are Denied Signed Java applets are denied these permissions.
Click the Edit Permissions tab. Select the option you need for more exact control over Java permissions for the zone. If you do not want to keep the settings that you have made, you can click the Reset button to reset permissions to:
Use caution when you adjust Java permissions. Some Java-based programs may not work properly after you change permissions. Some changes to Java permissions can make your computer liable to security breaches by hackers. Microsoft recommends that you do not change the default permissions unless you have a specific purpose for doing so.