IE Security Zones - Enable or Disable Level Settings

How to Enable or Disable Changing Security Zone Level Settings in Internet Explorer

information   Information
Zone security in Internet Explorer is a system that enables you to divide online content into categories, or zones. You can add or remove websites from the zones, depending on your level of trust in a website. Users can set default or custom level settings per security zone.

This tutorial will show you how to enable or disable all users to be able to change the Internet, Local intranet, Trusted sites, and Restricted sites security zone level settings in Internet Explorer.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Note   Note
This could be handy to set the security zones to "default level" or a "custom level" settings you like, then disable it to prevent any changes by users.


EXAMPLE: IE Security Zone Level Settings Enabled and Disabled
IE_Security_Zone_Settings-1.jpg
IE_Security_Zone_Settings-2.jpg






OPTION ONE

Enable/Disable Changing Security Zone Level Settings using REG File


1. Do step 2 or 3 below for what you would like to do.​
2. To Enable Changing IE Security Zone Level Settings
NOTE: This is the default setting.​
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Enable_Changing_IE_Security_Zone_Level_Settings.reg
download
3. To Disable Changing IE Security Zone Level Settings
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Disable_Changing_IE_Security_Zone_Level_Settings.reg
download

4. Save the .reg file to your desktop.
5. Double click/tap on the downloaded .reg file to merge it.
6. If prompted, click/tap on Run, Yes (UAC Windows 7/8) or Continue (UAC Vista), Yes, and OK.
7. When finished, you can delete the downloaded .reg file if you like.







OPTION TWO

Enable/Disable Changing Security Zone Level Settings using Group Policy


NOTE: This option for using group policy is only available in the Vista Business, Vista Ultimate, Vista Enterpise Windows 7 Professional, Windows 7 Ultimate, Windows 7 Enterprise, Windows 8 Pro, and Windows 8 Enterprise editions.
1. Press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.​
2. If prompted by UAC, then click/tap on Yes (Windows 7/8) or Continue (Vista).
3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, and open Internet Explorer. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-1.jpg
4. In the right pane of Internet Explorer, double click/tap on Security Zones: Do not allow users to change policies. (see screenshot above)​
5. Do step 6 or 7 below for what you would like to do.​
6. To Enable Changing IE Security Zone Level Settings
A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)​
NOTE: Not Configured is the default setting.​
7. To Disable Changing IE Security Zone Level Settings
A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-2.jpg

8. You can now close the Local Group Policy Editor window if you like.​


That's it,
Shawn


 

Attachments

  • Disable_Changing_IE_Security_Zone_Level_Settings.reg
    692 bytes · Views: 5,798
  • Enable_Changing_IE_Security_Zone_Level_Settings.reg
    666 bytes · Views: 16,864
  • IESecurity.png
    IESecurity.png
    12 KB · Views: 391
Last edited by a moderator:
Hi,

I have not had success with Option 1. I can't do Option 2 since I do no have Win8 Pro.

Have there been any issues using option1?

Thanks,
Steve
 
Last edited:

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core i7
    Browser
    ie11

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Hey thanks for the quick reply!

I get the nice warning that my registry will be edited:

Registry Editor.PNG

Then I get the message the registry was successfully edited:

Registry Editor Completed.PNG

But when I go to internet options to adjust security, custom level is still grayed out after a restart of IE and reseting the laptop:

Custom Level selection grayed out .PNG

Thanks,
Steve
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core i7
    Browser
    ie11
Last edited:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
I don't understand, I want to Enable Changing Security Zone Level Settings in Internet Explorer just as the title implies.

Thanks,
Steve
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba
    CPU
    Core i7
    Browser
    ie11
True, but your last screenshot shows some other policy or registry value is set for this instead. If you have a restore point available dated before this happened, it'll be a quick fix.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Hi @Brink, although your post is almost 4 years old I have a question. Is there another way to deinstall the above registry key? Other than using a restore point? I installed the key in a windows 10 (virtual) pc, but I want to undo it.
UPDATE: I already found out how to change it.
 
Last edited:

My Computer

System One

  • OS
    Windows 10
    Computer type
    Laptop
:thumbsup:
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Back
Top