Microsoft KB Archive/922704

= Information about some new Group Policy settings for Internet Explorer Security Zones in Microsoft Windows XP SP2 and in Microsoft Windows Server 2003 SP1 =

Article ID: 922704

Article Last Modified on 9/21/2006

-

APPLIES TO


 * Microsoft Internet Explorer 6.0
 * Microsoft Windows XP Service Pack 2
 * Microsoft Windows Server 2003 Service Pack 1

-



INTRODUCTION
This article describes some new Group Policy settings for Internet Explorer Security Zones in Microsoft Windows XP Service Pack 2 (SP2) and in Microsoft Windows Server 2003 Service Pack 1 (SP1).



The new Group Policy Settings for Internet Explorer Security Zones
Internet Explorer Maintenance changes the registry settings under the HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER registry hives. Here are two examples.

Under the HKEY_LOCAL_MACHINE registry hive
 Start Group Policy Object Editor. In the left pane, expand Computer Configuration, expand Administrative Templates, expand Windows Components, expand Internet Explorer, expand Internet Control Panel, expand Security Page, and then click Internet Zone. In the right pane, double-click Initialize and script ActiveX controls not marked as safe. Select Enabled, and then click OK. In Registry Editor, locate the following subkey:

 The value data of the 1201 Value name will be changed to 0.

Under the HKEY_CURRENT_USER registry hive
 Start Group Policy Object Editor.</li> In the left pane, expand Computer Configuration, expand Administrative Templates, expand Windows Components, expand Internet Explorer, expand Internet Control Panel, expand Security Page, and then click Internet Zone.</li> In the right pane, double-click Initialize and script ActiveX controls not marked as safe.</li> Select Enabled, and then click OK.</li> In Registry Editor, locate the following subkey:

</li> The value data of the 1201 Value name will be changed to 0.</li></ol>

In Windows Server 2003 Service Pack 1 and in Windows XP Service Pack 2, there is a new order in which Internet Explorer looks for policy settings. The original order is as follows:

The new order is as follows:

Overview of the new Group Policy settings
To view the new Group Policy settings, follow these steps:
 * 1) Start Group Policy Object Editor.
 * 2) In the left pane, expand User Configuration, expand Administrative Templates, expand Windows Components, expand Internet Explorer, expand Internet Control Panel, and then click Security Page.

The new Group Policy settings appear in the right pane.

The following is a list of the new Group Policy settings and their corresponding registry keys: <ul> Site to Zone Assignment List <ul>  </li>  </li></ul> </li> Local Machine Zone Template <ul>  </li>  </li></ul> </li> Locked-Down Local Machine Zone Template <ul>  </li>  </li></ul>

Note This applies only to Windows Server 2003 SP 1.</li> <li>Intranet Zone Template <ul> <li> </li> <li> </li></ul> </li> <li>Locked-Down Intranet Zone Template <ul> <li> </li> <li> </li></ul>

Note This applies only to Windows Server 2003 SP 1.</li> <li>Trusted Sites Zone Template <ul> <li> </li> <li> </li></ul> </li> <li>Locked-Down Trusted Sites Zone Template <ul> <li> </li> <li> </li></ul>

Note This applies only to Windows Server 2003 SP1.</li> <li>Internet Zone Template <ul> <li> </li> <li> </li></ul> </li> <li>Locked-Down Internet Zone Template <ul> <li> </li> <li> </li></ul>

Note This applies only to Windows Server 2003 SP1.</li> <li>Restricted Sites Zone Template <ul> <li> </li> <li> </li></ul> </li> <li>Locked-Down Restricted Sites Zone Template <ul> <li> </li> <li> </li></ul>

Note This applies only to Windows Server 2003 SP 1.</li></ul>

Keywords: kbhowto kbregistry kbgpo kbinfo KB922704

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.