Box Tools Internet Explorer Configuration Guide

Internet Explorer (IE) is unique among the browsers we support for Box Tools due to its complexity of configuration. This guide covers the most common IE configuration issues that can impact Box Tools. 

Note: Only IE 11 is supported by Box.



IE Security Zones

When reviewing the information below, it is important to understand IE's concept of Security Zones. IE uses Security Zones to categorize the websites visited in IE. Each Security Zone has its own set of security settings and policies. 

By default, IE will map Box's domains into the "Internet Zone". However, your organization may have configured IE to map Box's domains into a different zone such as the "Trusted Sites Zone" or the "Local Intranet Zone". Many of the settings below need to be configured in the Security Zone that the Box domains are mapped to. IE's Security Zones and settings can be accessed from the Settings (gear icon) > Internet Options > Security


Box Tools v4

Box Tools v4 requires an Box Tools ActiveX Add-on to be installed and used in IE. For an overview of Box Tools v4 system requirements, please see


For Box Tools v4, IE's settings for the https://* domain can impact Box Tools v4's functionality. The domain is not used for Box Tools v4. By default, IE will map the https://* domain into the "Internet Zone" but your organization may have configured IE to map the https://* domain into a different zone. 


Requirement #1: IE Security Zone settings for ActiveX controls

  • In the IE Security Zone that holds the https://* domain, the following settings need to enabled:
    • Run ActiveX controls and plug-ins
    • Script ActiveX controls marked safe for scripting
  • These settings can be found in IE's Settings (gear icon) > Internet Options > Security > select the Security Zone that contains the * domain > select Custom Level… > scroll down to the ActiveX controls and plug-ins section

Requirement #2: Group Policy settings for ActiveX Add-ons and ActiveX installation sites

  • Administrators may need to whitelist the Box Tools ActiveX Add-on and/or whitelist domains as approved installation sites depending on your Group Policy settings. 
  • In your Group Policy, under Computer Configuration\Administrative Templates\Windows Components\ActiveX Installer Service, if the Approved Installation Sites for ActiveX Controls setting is enabled, add the following domains below to the Host URLs list and set the value to 2,2,1,0: 
  • In your Group Policy, under Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management, if the Deny all add-ons unless specifically allowed in the Add-on List setting is enabled, the Box Tools ActiveX Add-on will need to be added to the Add-on List (see steps below) or the Deny all add-ons unless specifically allowed in the Add-on List setting needs to be disabled. To add  Box Tools ActiveX Add-on to the Add-on List:
    1. Navigate to the Add-on Management portion of your Group Policy settings
    2. Right click on Add-on List, select Edit, click on Enabled, and select Show
    3. For Value name, enter {BA58190A-A733-4982-8AE2-E2021F0DD503} which is the CLSID for the Box Tools ActiveX Add-on. For Value enter 1 so the add-on is enabled and cannot be disabled by your end users. For more information on controlling IE add-ons via Group Policy, please see this articleimage8tools4.png

Requirement #3: Windows 8 or later only

  • Windows 8 or laterEnable Enhanced Protected Mode under IE's Settings (gear icon) > Internet Options > Advanced must be disabled (unchecked) in order for Box Tools v4 to function in IE 11
  • For Windows 7 environments, Enable Enhanced Protected Mode can be enabled with no functional issues for Box Tools v4. 


The IEZoneAnalyzer is a tool provided my Microsoft which can be used to determine a domain's IE Security Zone. Download the tool from


Clicking Zone Map Viewer will show which sitesare specifically assigned to which IE Security Zones, if any.

Entering a URL in the bar at the top and clicking Map URL to Zone will show which IE Security Zone the given URL currently falls into.

Version history
Revision #:
12 of 12
Last update:
3 weeks ago
Updated by: