This policy setting controls how InfoPath handles e-mail forms that contain code or script. If you enable this policy setting, ...

This policy setting controls how InfoPath handles e-mail forms that contain code or script.
      
      If you enable this policy setting, you can choose from three different options for prompting the user:
      
      - Never run -  InfoPath will not open any e-mail forms that contain code or script.
      
      - Prompt before running - When users attempt to open e-mail forms that contain code or script, InfoPath will display a notification and allow users to choose whether to continue opening the form. This option is the default configuration.
      
      - Run without prompting - InfoPath will open any e-mail forms that contain code or script without prompting the user. This option could allow malicious code to run on the user's computer.
      
      If you disable this policy setting, InfoPath will open e-mail forms that contain code or script without prompting users.
      
      If you do not configure this policy setting, InfoPath notifies and prompts users before opening InfoPath e-mail forms that contain code or script.