The Pop-up Blocker feature in Internet Explorer can be used to block most unwanted pop-up and pop-under windows from appearing. Links that invoke instances of IE from within an Office product must be blocked.
If an application is configured to require all add-ins be signed by a trusted publisher, any unsigned add-ins the application loads will be disabled and the application will display the Trust Bar. Trust Bar Notifications for unsigned application add-ins must be blocked. Findings (MAC II - Mission Support Classified) Finding ID
