The November cumulative IE update (MS14-065) appears to break the domain-based exceptions for the new outdated ActiveX control blocking that is described here:
http://technet.microsoft.com/en-us/library/dn761713.aspx
We have the new IE group policies deployed in our environment to add domain exceptions for our enterprise to the outdated ActiveX blocking. This was all working perfectly prior to MS14-065. After installing that November update, our exceptions are no longer working and users are getting the block message for their Java applications.
Our environment is Windows 7 SP1 x64 using IE 9. Domain Controllers are 2008 R2.
If I manually remove MS14-065 (falling back to MS14-056, October update) the exceptions all work again as expected. Re-installing MS14-065 (November update) causes the exceptions to stop working again.
Thanks,
Brian