Microsoft KB Archive/321598

= Security Zone Settings Are Not Applied in Internet Explorer 6 =

Article ID: 321598

Article Last Modified on 2/1/2007

-

APPLIES TO


 * Microsoft Internet Explorer 6.0
 * Microsoft Internet Explorer 6.0

-



This article was previously published under Q321598



SYMPTOMS
Security changes from the Seczones.inf file may not be applied.



CAUSE
This problem may occur if the user does not have write access to the Program Files folder. In the following example Seczones.inf file, note that there are several pointers to ProgramFilesDir. Temp files are written to the Program Files folder in accordance with these pointers and to complete the security zones update. Because users cannot write to that folder, the process does not work, and the Branding log file (Brndlog.txt) shows a failure.

Seczones.inf File Example
[Version] Signature=$Chicago$ AdvancedINF=2.5

[DefaultInstall] RequiredEngine=SetupAPI,&quot;Fatal Error - missing setupapi.dll&quot; CustomDestination=CustInstDestSection AddReg=AddReg.Hkcu,AddReg.Hklm

[IeakInstall.Hkcu] RequiredEngine=SetupAPI,&quot;Fatal Error - missing setupapi.dll&quot; CustomDestination=CustInstDestSection AddReg=AddReg.Hkcu

[IeakInstall.Hklm] RequiredEngine=SetupAPI,&quot;Fatal Error - missing setupapi.dll&quot; CustomDestination=CustInstDestSection AddReg=AddReg.Hklm

[CustInstDestSection] 49000,49001,49002,49003=ProgramFilesDir,5 49100,49101,49102,49103=IEDir,5

[ProgramFilesDir] HKLM,&quot;SOFTWARE\Microsoft\Windows\CurrentVersion&quot;,&quot;ProgramFilesDir&quot;,,&quot;%24 %\Program Files&quot;

[IEDir] HKLM,&quot;SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\iexplore.exe&quot;,&quot;Path&quot;,,&quot;%49001%\Internet Explorer&quot;



RESOLUTION
To resolve this problem, obtain the latest service pack for Internet Explorer 6. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

328548 How to Obtain the Latest Internet Explorer 6 Service Pack

The English version of this fix should have the following file attributes or later:   Date         Time   Version         Size     File name -  26-Jun-2002  16:04   6.0.2717.200   126,976  Ieakeng.dll 26-Jun-2002 16:04  16.0.2718.1900  294,912  Iedkcs32.dll

IMPORTANT: You must apply this hotfix to all of your client computers and the computer on which the Internet Explorer Administration Kit (IEAK) is installed. You must also extract and then manually copy the Ieakeng.dll file into the IEAK installation folder. To keep this .dll file from being overwritten, you must turn off AVS in the IEAK wizard. Finally, to successfully load the Internet Explorer Manintentance settings under the Group Policy snap-in you must also apply the hotfix discussed in the following Microsoft Knowledge Base article:

316116 New Internet Explorer 6 Policies Are Not Available in Windows 2000



WORKAROUND
You may want to consider any of the following workarounds before you apply the hotfix:
 * Touch each computer locally, and then set local policies with Gpedit.msc.
 * Force users to use HKLM settings for security zones, and manage by starting the computer by using an administrator account to apply the changes.
 * Create an Active Directory and use a group policy object.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Internet Explorer 6 Service Pack 1.

Additional query words: gpo

Keywords: kbbug kbfix kbqfe kbie600presp1fix kbenv kbui kbie600sp1fix kbhotfixserver KB321598

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.