Internet Explorer Local Machine Zone Lockdown
I hope this is the correct forum..I need toenable javascript embedded within a particular .html file (which is locatedon the local hard drives of ~ 1000 Vista workstations) to execute without prompting the users for acceptance via the IE security bar. In testing my options, Ive made the following observations:> I can create the proper Registry entry within either HKCU or HKLM (*\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LocalMachine_Lockdown), and successfully execute code on a test page> Using the Mark of the Web method fails completely (adding <!-- saved from url=(0013)about:internet --> )> Disabling Computer Configuration | Administrative Templates | Windows Components | Internet Explorer | Security Features | Local Machine Zone Lockdown Security | Internet Explorer Processes within a GPO *appears* to work (I can see the change enabled within the Internet Properties applet), but the user is still prompted to allow the action.It is my preference to use the above group policy to manage this setting across this enterprise, but it seems to be buggy. From reading up on the policy, it should remove iexplorer.exe from the Local Machine zone, but it doesnt seem to work.. has anyone dealth with this setting before? Any advice or insight would be apppreciated.
May 6th, 2009 6:02pm

Hi Jeff, thanks for the post. We can try the following workaround and check the result: 1. Click Start, click Run, type gpedit.msc, and then click OK. 2. Under Computer Configuration, expand Administrative Templates. 3. Expand Windows Components, expand Internet Explorer, expand Security Features, and then click Add-on Management. 4. In the right pane, double-click Add-on List. 5. Click Enabled, and then click Show. 6. In the Show Contents dialog box, click Add. 7. In the Enter the name of the item to be added box, type {F414C260-6AC0-11CF-B6D1-00AA00BBBB58}. 8. In the Enter the value of the item to be added box, type an appropriate value, and then click OK. Note The following list explains the available value settings: o A value of 0 blocks the add-ons in Internet Explorer. o A value of 1 enables the add-ons in Internet Explorer. o A value of 2 allows the end user to adjust the add-ons in Internet Explorer. 9. In the Show Contents dialog box, click Add. 10. In the Enter the name of the item to be added box, type {B54F3741-5B07-11cf-A4B0-00AA004A55E8}. 11. In the Enter the value of the item to be added box, type , and then click OK. Note The following list explains the available value settings: o A value of 0 blocks the add-ons in Internet Explorer. o A value of 1 enables the add-ons in Internet Explorer. o A value of 2 allows the end user to adjust the add-ons in Internet Explorer. 12. Click OK two more times. 13. Exit Group Policy. You can also check the following KB article: http://support.microsoft.com/default.aspx/kb/915729 Though this KB is for Windows XP system, it seems that we can also try it on Vista based computer and see the result. Hope this helps! Sean Zhu - MSFT
Free Windows Admin Tool Kit Click here and download it now
May 8th, 2009 9:59am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics