To change the default settings for Internet Explorer
Go to the Control Panel and double click Internet Options.
Click on the Advanced tab.
Under the Browsing section
Uncheck Install On Demand and Install On Demand (other).
Uncheck Enable third-party browers extensions.
Scroll down to the Security section.
Check, Check for publisher's certificate revocation.
Check, Check for server certificate revocation. (mine is unchecked)
Check, Check for signatures on downloaded programs. (mine is unchecked)
Check, Warn about invalid site certificates.
Next click on the Security Tab.
Click on the Internet icon.
Click on Custom Level.
Under ActiveX controls and plug-ins
Choose prompt for Download signed ActiveX controls.
Choose disable for Download unsigned ActiveX control.
Choose disable for Initialize and script ActiveX controls not marked as safe. Scroll down to the Download section.
Choose disable or prompt for Font download. (mine is prompt)
Scroll down to the Microsoft VM section.
Choose high safety for Java permissions.
Scroll down to the Miscellaneous section.
Choose disable for Don't prompt for client certificate selections when no certificate or only one certificate exists.
Choose prompt or disable for Installation of desktop items.
You can leave the other boxes checked or unchecked as they were at default levels.
Yes you can disable more here but that's your choice and it depends on your needs. These settings serve me well enough without interfering with my needs. You may need additional changes depending on your programs or habits.
Click OK and confirm and apply and OK to accept the settings.
Scroll down to the Download section.