With SP2, Internet Explorer settings can be managed by using .adm policy settings.
In contrast to user preference settings, these new policy settings are written to a
secure tree in the registry so that users cannot change either by using the UI or
through the registry. These are referred to as “true policies.†In Windows XP with
SP2, you can manage all Internet Explorer security settings for both computer and
user configurations with these new policy settings, making true policies secure and
set only by an administrator.