﻿<?xml version="1.0" encoding="utf-8" ?> 
<SymBrowserPolicy xmlns="http://symantec.com/SymBrowserPolicy">
    <Browser Name="IE" Version="4.0">
        <InternetZone ID="101">
            <Action ID="1001" VAScore="Medium">
                <Description>Download signed ActiveX controls</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1004" VAScore="High">
                <Description>Download unsigned ActiveX controls</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1200" VAScore="High">
                <Description>Run ActiveX controls and plug-ins</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                    <Value>65536</Value>
                </AllowedValues>
            </Action>
            <Action ID="1201" VAScore="High">
                <Description>Initialize and script ActiveX controls not marked as safe</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                    <Value>65536</Value>
                </AllowedValues>
            </Action>
            <Action ID="1206" VAScore="High">
                <Description>Allow scripting of Internet Explorer web browser control</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1400" VAScore="High">
                <Description>Active scripting</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1402" VAScore="High">
                <Description>Scripting of Java applets</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1405" VAScore="High">
                <Description>Script ActiveX controls marked safe for scripting</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1406" VAScore="High">
                <Description>Access data sources across domains</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1407" VAScore="High">
                <Description>Allow programmatic clipboard access</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1601" VAScore="High">
                <Description>Submit non-encrypted form data</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1604" VAScore="High">
                <Description>Font download</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1606" VAScore="High">
                <Description>Userdata persistence</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1607" VAScore="High">
                <Description>Navigate sub-frames across different domains</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1608" VAScore="High">
                <Description>Allow META REFRESH</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1609" VAScore="High">
                <Description>Display mixed content</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1800" VAScore="High">
                <Description>Installation of desktop items</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1802" VAScore="High">
                <Description>Drag and drop or copy and paste files</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>   
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1803" VAScore="High">
                <Description>File download</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1804" VAScore="High">
                <Description>Launching applications and files in an IFRAME</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1805" VAScore="High">
                <Description>Launching programs and files in webview</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1806" VAScore="High">
                <Description>Launching applications and unsafe files</Description>
                <RecommendedValue>1</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1809" VAScore="High">
                <Description>Use Pop-up Blocker</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="1A00" VAScore="High">
                <Description>Logon</Description>
                <RecommendedValue>131072</RecommendedValue>
                <AllowedValues>
                    <Value>65536</Value>
                    <Value>131072</Value>
                </AllowedValues>
            </Action>
            <Action ID="1A04" VAScore="High">
                <Description>Do not prompt for client certificate selection when no certificates or only one certificate exists</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>    
            <Action ID="1C00" VAScore="High">
                <Description>Java permissions</Description>
                <RecommendedValue>65536</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>65536</Value>
                </AllowedValues>
            </Action>    
            <Action ID="1E05" VAScore="High">
                <Description>Software channel permissions</Description>
                <RecommendedValue>131072</RecommendedValue>
                <AllowedValues>
                    <Value>65536</Value>
                    <Value>131072</Value>
                </AllowedValues>
            </Action>
            <Action ID="2000" VAScore="High">
                <Description>Script and binary behaviors</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                    <Value>65536</Value>
                </AllowedValues>
            </Action>
            <Action ID="2001" VAScore="High">
                <Description>Run .NET Framework-reliant components signed with Authenticode</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2004" VAScore="High">
                <Description>Run .NET Framework-reliant components not signed with Authenticode</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2100" VAScore="High">
                <Description>Open files based on content, not file extension</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2101" VAScore="High">
                <Description>Web sites in less privileged Web content zones can navigate into this zone</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2102" VAScore="High">
                <Description>Allow script-initiated windows without size or position constraints</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2200" VAScore="High">
                <Description>Automatic prompting for file downloads</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2201" VAScore="High">
                <Description>Automatic prompting for ActiveX controls</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2300" VAScore="High">
                <Description>Allow active content over restricted protocols to access my computer</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
        </InternetZone>
    </Browser>
    <Browser Name="IE" Version="7.0">
        <InternetZone ID="101">
	    <Action ID="1208" VAScore="High">
                <Description>Allow previously unused ActiveX controls to run</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
	    <Action ID="1209" VAScore="High">
                <Description>Allow scriptlets</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>1</Value>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="120A" VAScore="High">
                <Description>Display video and animation on a webpage</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2103" VAScore="High">
                <Description>Allow status bar updates via script</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2104" VAScore="High">
                <Description>Allow websites to open windows without address or status bar</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2105" VAScore="High">
                <Description>Allow websites to prompt for information using scripted windows</Description>
                <RecommendedValue>3</RecommendedValue>
                <AllowedValues>
                    <Value>3</Value>
                </AllowedValues>
            </Action>
            <Action ID="2500" VAScore="High">
                <Description>Run Internet Explorer in Protected Mode</Description>
                <RecommendedValue>0</RecommendedValue>
                <AllowedValues>
                    <Value>0</Value>
                </AllowedValues>
            </Action>
        </InternetZone>
    </Browser>
</SymBrowserPolicy>