Forum Discussion

JamieWilding's avatar
JamieWilding
Copper Contributor
Apr 29, 2025

ActiveX Controls

Hello,

 

I want to enable the exact settings as below:

 

Steps to enable ActiveX controls if you are confident the file is safe

While enabling ActiveX controls is not recommended due to security concerns, you can enable them through the Trust Center if necessary.

Caution: Changing ActiveX settings will apply to all files in Office applications: Word, PowerPoint, Excel, and Visio – not just the file in which you make the change.

  1. Select File, then Options.
  2. Select Trust Center, then the Trust Center Settings button.
  3. Select ActiveX Settings, then make sure Prompt me before enabling all controls with minimal restrictions.
  4. Select OK, then OK again to save your settings and go back to your document.

For optimal security, Microsoft strongly encourages leaving ActiveX controls disabled unless absolutely necessary.

 

 

 

I have intended to apply this however I am struggling to find the relevant settings for this within intune. One example of a setting I have applied is "ActiveX Control Initialization(user) using value 6. 

 

This is still flagging an issue with an excel file, alongside not allowing a prompt to allow it.

 

Anyone got any ideas at settings they may have applied for this? This is to run in the most minimal way as possible.


Thank you,
Jamie.

Software Management

1 Reply

Sort By
  • micheleariis's avatar
    micheleariis
    Steel Contributor
    May 06, 2025

    Hi Jamie, to enable ActiveX in the most minimal way via Intune, do the following:

    Create an Administrative Templates profile

    In Intune: Device configuration > Templates > Administrative Templates

    Navigate to Microsoft Office 2016-2019 (or Office 365) > Security Settings > ActiveX Controls.

    Set the key policies

    “Prompt me before initializing and running all controls with minimal restrictions” - Enabled

    “ActiveX Control Initialization (user)” - 6 (Prompt)

    If needed, enable “Allow ActiveX controls to run in Office documents” with minimal restrictions.

    Scope and assign

    Target the user group (or device group) that needs this setting.

    Choose User vs. Device configuration based on your Office deployment.

    Sync and verify

    In Intune, go to Devices - Sync to force a policy check‑in.

    Open Excel and check File - Options > Trust Center to confirm the new prompt appears.

    If it’s still blocked, export the working ADMX settings from a test PC and import them as a Custom OMA‑URI pointing to the registry keys under:

    HKCU\Software\Policies\Microsoft\Office\<version>\[App]\Security\ActiveX


    This keeps ActiveX disabled by default but prompts you when it really matters.

Resources