Geoff Chappell - Software Analyst
Recent versions of Internet Explorer introduce yet another collection of registry settings. This batch are called feature controls. They are in general boolean, such that evaluation as true means that the corresponding feature, which is often some kind of restriction or prohibition, is enabled.
As with several other collections, the feature controls may appear in any of several branches. In order of decreasing precedence, these are:
except that the branches in HKEY_CURRENT_USER are ignored if the following evaluates to 1:
| Key | HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings |
| Value | Security_HKLM_only |
| Type | REG_DWORD |
The merit of allowing each setting at the same place with respect to multiple branches is the usual one of establishing policies versus preferences, machine-wide or per user.
The particular merit of the feature controls is that they evaluate their features per-process. Each feature’s name is a subkey of the FeatureControl key. The values in the feature’s key each name a process. A special value * catches processes that aren’t named explicitly. A feature is evaluated for a process by iterating through the applicable branches in order of decreasing precedence and accepting the first value that applies to that process. It does not matter which branch the value comes from. Each feature has a default for when no applicable value is found in any branch. For many features, the default depends on whether the process’s filename is any of EXPLORER.EXE, IEXPLORE.EXE or IEUSER.EXE.
| Key | HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl |
| Subkey | feature |
| Value | filename
for any process whose executable has that filename (subject to note below);
* for all executables |
| Type | REG_SZ in policy branches, else REG_DWORD |
| Data | the string 0 in policy branches, else the dword
0, for false; the string 1 in policy branches, else the dword 1, for true; else value is ignored |
| Default | varies with feature and filename |
Among the filename values for any feature control, iexplore.exe stands also for any process whose filename is “ieuser.exe”, with the side-effect that values named ieuser.exe are ignored.
Some features are made programmatically accessible through functions exported from URLMON. The archetype is CoInternetIsFeatureEnabled, but there are also variants that provide for the question “is this feature enabled” to depend on extra arguments such as a URL. These features are documented. Some even have user-interface support, if only through the Group Policy Object Editor.
Of particular interest here is the existence of rather many features that Microsoft does not document. These are checked by several Internet Explorer modules, using library code for consistency. This library code differs from URLMON in one respect: the different default applies only to IEXPLORE.EXE and EXPLORER.EXE, not to IEUSER.EXE. The list that follows is very unlikely to be complete, regarding these internal features. It would also not surprise if the internal features are highly volatile from one Windows version to another. The list below, which is still in development in various ways, comes from inspection of Windows XP up to and including SP2, Windows Server 2003 up to and including SP1, and Windows Vista.
By the way, I do not propose to investigate what any (let alone all) of the features listed below actually do.
| Feature | COMPRESSED_CONTENT_RESPECTS_SSL_CACHING_SETTING |
| Default | 1 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_ACTIVEX_REPURPOSEDETECTION |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_ADDON_MANAGEMENT |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0D in the INTERNETFEATURELIST enumeration.
The FEATURE_ADDON_MANAGEMENT feature has user-interface support through the Group Policy Object Editor, as Add-on Management among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_ADDON_MANAGEMENT is enabled for the following process: wmplayer.exe.
| Feature | FEATURE_ALLOW_EXPANDURI_BYPASS |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_BEHAVIORS |
| Default | 1 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x06 in the INTERNETFEATURELIST enumeration.
The FEATURE_BEHAVIORS feature has user-interface support through the Group Policy Object Editor, as Binary Behavior Security Restriction among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_BEHAVIORS is:
| Feature | FEATURE_BLOCK_INPUT_PROMPTS |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x1B in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_BLOCK_LMZ_IMG |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_BLOCK_LMZ_OBJECT |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_BLOCK_LMZ_SCRIPT |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_BLOCK_SETCAPTURE_XDOMAIN |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_BUFFERBREAKING_818408 |
| Default | 0 |
| Availability | WININET.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_CFSTR_INETURLW_DRAGDROP_FORMAT |
| Default | 1 |
| Availability | IEFRAME.DLL version 7.0 and higher; MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME and MSHTML.
| Feature | FEATURE_CLEANUP_AT_FLS |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_CONSULT_MIME_KILLBIT_KB905915 |
| Default | 1 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_CONTENT_ADVISOR_FRAME_ABOUT_BLANK_SSL_KB827259 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_CONVERT_A3A0INGB2312 |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_CREATE_URL_MONIKER_DISABLE_LEGACY_COMPAT |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_CrossDomain_Fix_KB867801 |
| Default | 1 |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_Cross_Domain_Redirect_Mitigation |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_CSS_DATA_RESPECTS_XSS_ZONE_SETTING_KB912120 |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_CUSTOM_IMAGE_MIME_TYPES_KB910561 |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_DELETE_ABORTED_COMPRESSED_FILES_KB834224 |
| Default | 0 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_DIGEST_NO_EXTRAS_IN_URI |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_DISABLE_LEGACY_COMPRESSION |
| Default | 1 |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x16 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_DISABLE_MK_PROTOCOL |
| Default | 1 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x07 in the INTERNETFEATURELIST enumeration.
The FEATURE_DISABLE_MK_PROTOCOL feature has user-interface support through the Group Policy Object Editor, as MK Protocol Security Restriction among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_DISABLE_MK_PROTOCOL is:
| Feature | FEATURE_DISABLE_NAVIGATION_SOUNDS |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x15 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_DISABLE_TELNET_PROTOCOL |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x19 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
In a fresh installation of Windows Vista, FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK is enabled for the following process: YahooMusicEngine.exe.
| Feature | FEATURE_DISPLAY_NODE_ADVISE_KB833311 |
| Default | 1 |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_DOCTYPE_FOCUS_SCROLLBAR_KB838386 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_DOWNLOAD_PROMPT_META_CONTROL |
| Default | 1 |
| Availability | SHDOCVW.DLL version 6.0 from Windows XP SP2 and Windows Server 2003 SP1;
IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by SHDOCVW and IEFRAME.
| Feature | FEATURE_DRAGDROP_KB834707 |
| Default | 1 |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_ENABLE_ACTIVEX_INACTIVATE_MODE |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | Feature_Enable_Compat_Logging |
| Default | 0 |
| Availability | IERTUTIL.DLL version 7.0 and higher |
This is an internal feature control, read by IERTUTIL.
| Feature | FEATURE_Enable_IE_Compression |
| Default | 0 |
| Availability | URLMON.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_Enable_MixContent_Goldbar |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT |
| Default | 0 for EXPLORER.EXE and IEXPLORE.EXE; 1 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
In a fresh installation of Windows Vista, FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT is enabled for the following processes: devenv.exe, dexplore.exe and helppane.exe.
| Feature | FEATURE_ENHANCED_IMAGE_DRAGDROP_SECURITY_KB867282 |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_FEEDS |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x1A in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_FORCE_ADDR_AND_STATUS |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x17 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_GET_URL_DOM_FILEPATH_UNENCODED |
| Default | 1 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x12 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_HIGH_CONTRAST_BACKGROUND_IMAGES |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_HIGH_CONTRAST_BACKGROUND_IMAGES is enabled for the following process: sidebar.exe.
| Feature | FEATURE_HTTP_USERNAME_PASSWORD_DISABLE |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher; WININET.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0F in the INTERNETFEATURELIST enumeration. It is also accessed as an internal feature control, by WININET.
In a fresh installation of Windows Vista, FEATURE_HTTP_USERNAME_PASSWORD_DISABLE is enabled for the following processes: ehExtHost.exe and wmplayer.exe.
| Feature | FEATURE_IE6_Default_Frame_Navigation_Behavior |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_IEDDE_REGISTER_PROTOCOL |
| Default | 0 |
| Availability | IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME.
| Feature | FEATURE_IEDDE_REGISTER_URLECHO |
| Default | 0 |
| Availability | IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME.
| Feature | FEATURE_IGNORE_MAPPINGS_FOR_CREDPOLICY |
| Default | 1 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_IGNORE_POLICIES_ZONEMAP_IF_ESC_ENABLED_KB918915 |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_IGNORE_XML_PROLOG |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_IGNORE_XML_PROLOG is disabled for the following process:
| Feature | FEATURE_IMAGING_USE_ART |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_IMAGING_USE_ART is enabled for the following processes: cs.exe, waol.exe and wm.exe.
| Feature | FEATURE_INCLUDE_PORT_IN_SPN_KB908209 |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_INTERNET_SHELL_FOLDERS |
| Default | 1 |
| Availability | IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME.
In a fresh installation of Windows Vista, FEATURE_INTERNET_SHELL_FOLDERS is disabled for the following process: iexplore.exe.
| Feature | FEATURE_LEGACY_DISPPARAMS |
| Default | 0 for EXPLORER.EXE and IEXPLORE.EXE; 1 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_LEGACY_DISPPARAMS is disabled for the following process: helppane.exe.
| Feature | FEATURE_LIMIT_MONIKERS |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_LOCALMACHINE_LOCKDOWN |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x08 in the INTERNETFEATURELIST enumeration.
The FEATURE_LOCALMACHINE_LOCKDOWN feature has user-interface support through Internet Properties in the Control Panel, as “Allow active content to run in files on My Computer” in the Security group on the Advanced tab. Note however that filename is constrained to “iexplore.exe”. This feature has user-interface support as a policy, too, through the Group Policy Object Editor, as Local Machine Zone Lockdown Security among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_LOCALMACHINE_LOCKDOWN is enabled for the following processes: explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_MIME_HANDLING |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher; WININET.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x02 in the INTERNETFEATURELIST enumeration. It is also accessed as an internal feature control, by WININET.
The FEATURE_MIME_HANDLING feature has user-interface support through the Group Policy Object Editor, as Consistent Mime Handling among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_MIME_HANDLING is enabled for the following processes: ehExtHost.exe, explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_MIME_SNIFFING |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x03 in the INTERNETFEATURELIST enumeration.
The FEATURE_MIME_SNIFFING feature has user-interface support through the Group Policy Object Editor, as Mime Sniffing Safety Feature among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_MIME_SNIFFING is enabled for the following processes: ehExtHost.exe, explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_NO_FIEF_UI |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_Not_Terminate_WorkerThread |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_OBJECT_CACHING |
| Default | 1 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x00 in the INTERNETFEATURELIST enumeration.
The FEATURE_OBJECT_CACHING feature has user-interface support through the Group Policy Object Editor, as Object Caching Protection among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_OBJECT_CACHING is:
| Feature | FEATURE_PAGINATION_REDUCTION_KB834158 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_PERFORMANCE_ISSUE_KB843268 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_PERMIT_CACHE_FOR_AUTHENTICATED_FTP_KB910274 |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_PRIVATE_FONT_SETTING |
| Default | 1 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_PROTOCOL_LOCKDOWN |
| Default | 0 |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0E in the INTERNETFEATURELIST enumeration.
The FEATURE_PROTOCOL_LOCKDOWN feature has user-interface support through the Group Policy Object Editor, as Network Protocol Lockdown among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_PROTOCOL_LOCKDOWN is:
| Feature | FEATURE_READ_ZONE_STRINGS_FROM_REGISTRY |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_RESPECT_OBJECTSAFETY_POLICY_KB905547 |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_RESTRICT_ACTIVEXINSTALL |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0A in the INTERNETFEATURELIST enumeration.
The FEATURE_RESTRICT_ACTIVEXINSTALL feature has user-interface support through the Group Policy Object Editor, as Restrict ActiveX Install among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_RESTRICT_ACTIVEXINSTALL is enabled for the following process: wmplayer.exe.
| Feature | FEATURE_RESTRICT_CDL |
| Default | 1 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_RESTRICT_FILEDOWNLOAD |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0C in the INTERNETFEATURELIST enumeration.
The FEATURE_RESTRICT_FILEDOWNLOAD feature has user-interface support through the Group Policy Object Editor, as Restrict File Download among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_RESTRICT_FILEDOWNLOAD is enabled for the following processes: msimn.exe, winmail.exe and wmplayer.exe.
| Feature | FEATURE_RESTRICT_RES_TO_LMZ |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_RESTRICTED_ZONE_WHEN_FILE_NOT_FOUND |
| Default | 0 |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_SAFE_BINDTOOBJECT |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x10 in the INTERNETFEATURELIST enumeration.
In a fresh installation of Windows Vista, FEATURE_SAFE_BINDTOOBJECT is enabled for the following processes: ehExtHost.exe, explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_SANITIZE_DRAGDROP_DATA_KB867282 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SCRIPTINITIATED_DRAGDROP_HITTEST_SECURITY_KB867282 |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SCRIPTINITIATED_DRAGDROP_RESPECTS_URLACTION_KB867282 |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SCRIPTINITIATED_DRAGDROP_SECURITY_KB867282 |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SCRIPTURL_MITIGATION |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SECURITYBAND |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x09 in the INTERNETFEATURELIST enumeration.
The FEATURE_SECURITYBAND feature has user-interface support through the Group Policy Object Editor, as Information Bar among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_SECURITYBAND is enabled for the following process: wmplayer.exe.
| Feature | FEATURE_SECURE_ANCHORCLICKBEHAVIOR_KB867282 |
| Default | 1 |
| Availability | IEPEERS.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by IEPEERS.
| Feature | FEATURE_SELECT_KEY_KB818614 |
| Default | |
| Availability | MSHTML.DLL version 6.0 from Windows XP SP2 |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SHIM_MSHELP_COMBINE |
| Default | 0 for EXPLORER.EXE and IEXPLORE.EXE; 1 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_SKIP_LEAK_CLEANUP_AT_SHUTDOWN_KB835183 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.
| Feature | FEATURE_SKIP_POST_RETRY_ON_INTERNETWRITEFILE_KB895954 |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_SSLUX |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x14 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_SUBDOWNLOAD_LOCKDOWN |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_SUBDOWNLOAD_LOCKDOWN is enabled for the following processes: msimn.exe, outlook.exe and winmail.exe.
| Feature | FEATURE_TABBED_BROWSING |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x13 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_UNC_SAVEDFILECHECK |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x11 in the INTERNETFEATURELIST enumeration.
In a fresh installation of Windows Vista, FEATURE_UNC_SAVEDFILECHECK is enabled for the following processes: ehExtHost.exe and wmplayer.exe.
| Feature | FEATURE_USE_CNAME_FOR_SPN_KB911149 |
| Default | 0 |
| Availability | WININET.DLL version 7.0 and higher |
This is an internal feature control, read by WININET.
| Feature | FEATURE_USE_WINDOWEDSELECTCONTROL |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
In a fresh installation of Windows Vista, FEATURE_USE_WINDOWEDSELECTCONTROL is enabled for the following processes: excel.exe, infopath.exe, powerpnt.exe and winword.exe.
| Feature | FEATURE_VALIDATE_NAVIGATE_URL |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x0B in the INTERNETFEATURELIST enumeration.
In a fresh installation of Windows Vista, FEATURE_VALIDATE_NAVIGATE_URL is enabled for the following processes: ehExtHost.exe and wmplayer.exe.
| Feature | FEATURE_VALIDATE_URLHOSTNAME |
| Default | |
| Availability | URLMON.DLL version 6.0 from Windows Server 2003 SP1 |
This is an internal feature control, read by URLMON.
| Feature | FEATURE_WARN_ON_SEC_CERT_REV_FAILED |
| Default | 0 |
| Availability | IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME.
| Feature | FEATURE_WEBOC_MOVESIZECHILD |
| Default | 0 |
| Availability | IEFRAME.DLL version 7.0 and higher |
This is an internal feature control, read by IEFRAME.
In a fresh installation of Windows Vista, FEATURE_WEBOC_MOVESIZECHILD is enabled for the following processes: msn.exe and msn6.exe.
| Feature | FEATURE_WEBOC_POPUPMANAGEMENT |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x05 in the INTERNETFEATURELIST enumeration.
In a fresh installation of Windows Vista, FEATURE_WEBOC_POPUPMANAGEMENT is enabled for the following processes: explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_WINDOW_RESTRICTIONS |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x04 in the INTERNETFEATURELIST enumeration.
The FEATURE_WINDOW_RESTRICTIONS feature has user-interface support through the Group Policy Object Editor, as Scripted Window Security Restrictions among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_WINDOW_RESTRICTIONS is enabled for the following processes: explorer.exe, iexplore.exe and wmplayer.exe.
| Feature | FEATURE_XMLHTTP |
| Default | 1 |
| Availability | URLMON.DLL version 7.0 and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x18 in the INTERNETFEATURELIST enumeration.
| Feature | FEATURE_ZONE_ELEVATION |
| Default | 1 for EXPLORER.EXE, IEUSER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | URLMON.DLL version 6.0 from Windows XP SP2, and higher |
This is a documented feature control, accessible through exported URLMON functions. It is number 0x01 in the INTERNETFEATURELIST enumeration.
The FEATURE_ZONE_ELEVATION feature has user-interface support through the Group Policy Object Editor, as Protection From Zone Elevation among the Security Features in the Internet Explorer administrative template (displayed under Windows Components).
In a fresh installation of Windows Vista, FEATURE_ZONE_ELEVATION is enabled for the following processes: ehExtHost.exe, explorer.exe, iexplore.exe, PresentationHost.exe and wmplayer.exe.
| Feature | IMAGING_EMF_USE_RCLFRAMESIZE_KB905299 |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | KB325355_INCREASE_WEBFOLDER_MAXURLLENGTH_TO_260CHAR |
| Default | |
| Availability | IEPEERS.DLL version 6.0 from Windows XP SP2 and Windows Server 2003 SP1 |
This is an internal feature control, read by IEPEERS.
| Feature | KB895948_DISABLE_MAIL_SUBDOWNLOAD_LOCKDOWN |
| Default | 0 |
| Availability | MSHTML.DLL version 7.0 and higher |
This is an internal feature control, read by MSHTML.
| Feature | KB890923_ANCHORCLICKBEHAVIOR_POPUP_FIX |
| Default | 1 for EXPLORER.EXE and IEXPLORE.EXE; 0 otherwise |
| Availability | IEPEERS.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by IEPEERS.
| Feature | RETRY_HEADERONLYPOST_ONCONNECTIONRESET |
| Default | 0 |
| Availability | WININET.DLL version 6.0 from Windows XP SP2, and higher |
This is an internal feature control, read by WININET.
| Feature | SELECT_KEY_KB818614 |
| Default | 0 |
| Availability | MSHTML.DLL version 6.0 from Windows Server 2003 SP1, and higher |
This is an internal feature control, read by MSHTML.