GPOs (Group Policy Objects) allow us to do a one-to-many administration of our clients. The question is why do we need ActiveX group policy objects for IE. Well, ActiveX controllers allow your web browsers to have more functionality. They let your users do more in a web page. They can also be malacious. The ActiveX GPO settings allow you to control what type of ActiveX controls your users can instal, and from where. By designatation ActiveX restriction in your IE trusted zones, you can make sure that your ActiveX controllers are properly tested prior to allowing them to be installed on your clients. The link below explains more about the individual GPOs for ActiveX.