Microsoft:

Set Internet and local Intranet, security zone settings to ‘high’, to block Active X controls and active scripting in Harmful zones. Configure, IE to prompt before running Active Scripting or to disable it, while browsing in a harmful Atmosphere