Hello Guys as i'm still experimenting with Network Protocol Lock down i now figured out who it should work. Thanks to this post: http://blogs.technet.com/b/fdcc/archive/2008/09/19/fdcc-and-internet-explorer-7-part-1-security-zones.aspx If you receive Content over a Restricted Protocol the Locked Down Zone Settings applied to this content. (The Documentation about this features is very Bad) But now i tried to implement this feature but it isnt working as expected, maybe someone can give me a hint what im doing wrong: I did the following: hosted a page on a webserver, embeded a external java script over file protocol (same server) <script src="file://...."> thats the Test Setup. IN the User Policy Settings of the GPO i enabled under Internet Explorer Settings \ Security Features\ network protocol Lockdown\ Internet Explorer Process in the Subkey Restricted Policy Settings \ internet Zone Restricted Protocols\ i enabled the Policy and Added "file" without the " IN the Locked down Internet Zone Settings i disabled Active Scripting ( thats what needed to block the script) But the script is still running. When i Visit the Testpage the Correct Zone (Internet) is displayed in the menu bar. For the Internet Zone (not the locked down one) i set Active Scripting to Prompt, and when i Visit the site i get prompted for the Execution of the script so the policy is applied to the Client. Does anyone has i idea what im doing wrong? best regards Stefan

Hi, According to your description, I suggest to ask IE 8 Forum for further help: http://social.technet.microsoft.com/Forums/en-US/ieitprocurrentver/threads The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding. Regards, Leo HuangPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.