Solved: Tools-->Internet Options-->Advanced-->Reset button at the bottom.
I have the security zones back to normal and the ActiveX error in MMC snap-ins (line services.msc, gpedit.msc) now display the Extended version just fine.
Hope this helps someone else.