[Ie programming] a detailed explanation of IE's killbit Technology

Killbit is a technology used by IE to prohibit ActiveX running. It is a registry setting

 

HKEY_LOCAL_MACHINE/software/Microsoft/Internet Explorer/ActiveX Compatibility/<CLSID>

Compatability = Value

 

This compatability is a bitmask of the REG_DWORD type. Each bit has a certain meaning. For details, see the table below (or the msdn reference document)

Compat_aggregate = 0x00000001,
Compat_no_objectsafety = 0x00000002,
Compat_no_proppolicysink = 0x00000004,
Compat_send_show = 0x00000008,
Compat_send_hide = 0x00000010,
Compat_always_inplaceactivate = 0x00000020,
Compat_no_setextent = 0x00000040,
Compat_no_uiactivate = 0x00000080,
Compat_no_quickactivate = 0x00000100,
Compat_no_bindf_offlineoperation = 0x00000200,
Compat_evil_dont_load = 0x00000400,
Compat_progsink_until_activated = 0x00000800,
Compat_use_propbag_and_stream = 0x00001000,
Compat_disablewindows = 0x00002000,
Compat_set1_wrgn = 0x00004000,
Compat_printpluginsite = 0x00008000,
Compat_inplaceactivateevenwheninvisible = 0x00010000,
Compat_neverfocussable = 0x00020000,
Compat_alwaysdeferset1_wrgn = 0x00040000,
Compat_inplaceactivatesynchronously = 0x00080000,
Compat_needszerobaseddrawrect = 0x00100000,
Compat_hwndprivate = 0x00200000,
Compat_securitycheckonredirect = 0x00400000,
Compat_safefor_loading = 0x00800000

 

When 0x400 is set, the ActiveX will be completely blocked by IE. We call this bit kill bit, so we haveKillbitThis technical name

 

Example:For example, if you want to shield an ActiveX control whose GUID is {ABCDEF12-ABCD-ABCD-ABCD-ABCDEF123456}, you can set the registry:

 

HKEY_LOCAL_MACHINE/software/Microsoft/Internet Explorer/ActiveX Compatibility/{ABCDEF12-ABCD-ABCD-ABCD-ABCDEF123456}

Compatability = 400

 

(If the above 400 is in hexadecimal format, it is set to 1024 in decimal format)

 

 

For more information, see How to stop an ActiveX control from running in Internet Explorer.