Microsoft has made a significant security update in Microsoft 365, disabling all ActiveX controls by default without prompting users for permission. This change improves system security by defaulting to a more restrictive setting that aims to block potentially harmful controls that have been historically exploited. Users will need to navigate to the Trust Center to re-enable any ActiveX controls, which assumes administrative permissions are granted. Although ActiveX has been deprecated and replaced by newer technologies, its legacy remains due to ongoing enterprise reliance, highlighting the complexities of security in older systems.
ActiveX controls, long a security risk, will now be entirely disabled by default in Microsoft 365, requiring explicit user action to re-enable.
Microsoft claims this change enhances security by blocking potentially dangerous ActiveX controls, reducing the risks associated with malware and unauthorized code execution.
The new default setting replaces a less secure option that previously required user understanding, indicating a shift towards a more cautious approach to system security.
Despite its deprecated status, ActiveX remains in use due to legacy systems and practices, presenting challenges for organizations reliant on its functionality.
Collection
[
|
...
]