G
Guest
IE 6 Restriced Sites List under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\(somesite).com will be used for all users. IE 7 has
removed this feature which reduces IE security. The only way to get this
feature back is set
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings Value: Security_HKLM_only DWORD Value=1 This has a bad side effect
which allows the user to change the HKLM keys. If "Security_zones_map_edit"
is also added this will fix the problem but adds a problem too. The user now
has no way to add a restricted site.
Second problem is with IE6 and IE7 both fail to use
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Ranges\Range????? unless
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value: Security_HKLM_only DWORD Value=1 is set.
Also a bug in how you enter them exists.
If you enter the :Range Value String 32.124.23.11 then enter DWORD * with
value of 4 it will not be used. If you enter them with the DWORD first it
will work correctly. When
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value: Security_HKLM_only DWORD Value=1 is set.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains\(somesite).com will be used for all users. IE 7 has
removed this feature which reduces IE security. The only way to get this
feature back is set
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings Value: Security_HKLM_only DWORD Value=1 This has a bad side effect
which allows the user to change the HKLM keys. If "Security_zones_map_edit"
is also added this will fix the problem but adds a problem too. The user now
has no way to add a restricted site.
Second problem is with IE6 and IE7 both fail to use
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Ranges\Range????? unless
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value: Security_HKLM_only DWORD Value=1 is set.
Also a bug in how you enter them exists.
If you enter the :Range Value String 32.124.23.11 then enter DWORD * with
value of 4 it will not be used. If you enter them with the DWORD first it
will work correctly. When
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value: Security_HKLM_only DWORD Value=1 is set.