• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

IE Security Zones - Enable or Disable Level Settings


Brink

Administrator
Administrator
mvp
Posts
22,827
IE Security Zones - Enable or Disable Level Settings
This tutorial will show you how to enable or disable all users to be able to change the Internet, Local intranet, Trusted sites, and Restricted sites security zone level settings in Internet Explorer.
Published by Brink
#1
ByLine
How to Enable or Disable Changing Security Zone Level Settings in Internet Explorer
Synopsis
This tutorial will show you how to enable or disable all users to be able to change the Internet, Local intranet, Trusted sites, and Restricted sites security zone level settings in Internet Explorer.
How to Enable or Disable Changing Security Zone Level Settings in Internet Explorer

information   Information
Zone security in Internet Explorer is a system that enables you to divide online content into categories, or zones. You can add or remove websites from the zones, depending on your level of trust in a website. Users can set default or custom level settings per security zone.

This tutorial will show you how to enable or disable all users to be able to change the Internet, Local intranet, Trusted sites, and Restricted sites security zone level settings in Internet Explorer.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Note   Note
This could be handy to set the security zones to "default level" or a "custom level" settings you like, then disable it to prevent any changes by users.


EXAMPLE: IE Security Zone Level Settings Enabled and Disabled
IE_Security_Zone_Settings-1.jpg
IE_Security_Zone_Settings-2.jpg






OPTION ONE
Enable/Disable Changing Security Zone Level Settings using REG File

1. Do step 2 or 3 below for what you would like to do.​
2. To Enable Changing IE Security Zone Level Settings
NOTE: This is the default setting.​
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Enable_Changing_IE_Security_Zone_Level_Settings.reg
download
3. To Disable Changing IE Security Zone Level Settings
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Disable_Changing_IE_Security_Zone_Level_Settings.reg
download

4. Save the .reg file to your desktop.
5. Double click/tap on the downloaded .reg file to merge it.
6. If prompted, click/tap on Run, Yes (UAC Windows 7/8) or Continue (UAC Vista), Yes, and OK.
7. When finished, you can delete the downloaded .reg file if you like.







OPTION TWO
Enable/Disable Changing Security Zone Level Settings using Group Policy

NOTE: This option for using group policy is only available in the Vista Business, Vista Ultimate, Vista Enterpise Windows 7 Professional, Windows 7 Ultimate, Windows 7 Enterprise, Windows 8 Pro, and Windows 8 Enterprise editions.
1. Press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.​
2. If prompted by UAC, then click/tap on Yes (Windows 7/8) or Continue (Vista).
3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, and open Internet Explorer. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-1.jpg
4. In the right pane of Internet Explorer, double click/tap on Security Zones: Do not allow users to change policies. (see screenshot above)​
5. Do step 6 or 7 below for what you would like to do.​
6. To Enable Changing IE Security Zone Level Settings
A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)​
NOTE: Not Configured is the default setting.​
7. To Disable Changing IE Security Zone Level Settings
A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-2.jpg

8. You can now close the Local Group Policy Editor window if you like.​


That's it,
Shawn


 
Last edited by a moderator:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom self built
    CPU
    Intel i7-3930K 3.2 Ghz (O/C to 4 Ghz)
    Motherboard
    ASRock X79 Extreme11
    Memory
    32 GB (8GBx4) G.SKILL DDR3 Quad PC3-19200 2400 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    SB Recon 3Di Integrated Chip
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    256GB OCZ Vector
    6TB WD Black WD6001FZWX
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Corsair Air 740
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    100 Mb/s Download and 10 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Lite-On iHBS212 12x BD Writer
    Creative F200 webcam
    Samsung CLX-3175FW Printer
    Linksys EA9500 Router
    Arris SB6190 Cable Modem
    APC SMART-UPS RT 1000 XL

73gitane

New Member
Posts
3
#2
Hi,

I have not had success with Option 1. I can't do Option 2 since I do no have Win8 Pro.

Have there been any issues using option1?

Thanks,
Steve
 
Last edited:

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model Number
    Toshiba
    CPU
    Core i7
    Browser
    ie11

Brink

Administrator
Administrator
mvp
Posts
22,827
#3

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom self built
    CPU
    Intel i7-3930K 3.2 Ghz (O/C to 4 Ghz)
    Motherboard
    ASRock X79 Extreme11
    Memory
    32 GB (8GBx4) G.SKILL DDR3 Quad PC3-19200 2400 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    SB Recon 3Di Integrated Chip
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    256GB OCZ Vector
    6TB WD Black WD6001FZWX
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Corsair Air 740
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    100 Mb/s Download and 10 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Lite-On iHBS212 12x BD Writer
    Creative F200 webcam
    Samsung CLX-3175FW Printer
    Linksys EA9500 Router
    Arris SB6190 Cable Modem
    APC SMART-UPS RT 1000 XL

73gitane

New Member
Posts
3
#4
Hey thanks for the quick reply!

I get the nice warning that my registry will be edited:

Registry Editor.PNG

Then I get the message the registry was successfully edited:

Registry Editor Completed.PNG

But when I go to internet options to adjust security, custom level is still grayed out after a restart of IE and reseting the laptop:

Custom Level selection grayed out .PNG

Thanks,
Steve
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model Number
    Toshiba
    CPU
    Core i7
    Browser
    ie11

Brink

Administrator
Administrator
mvp
Posts
22,827
#5
Last edited:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom self built
    CPU
    Intel i7-3930K 3.2 Ghz (O/C to 4 Ghz)
    Motherboard
    ASRock X79 Extreme11
    Memory
    32 GB (8GBx4) G.SKILL DDR3 Quad PC3-19200 2400 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    SB Recon 3Di Integrated Chip
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    256GB OCZ Vector
    6TB WD Black WD6001FZWX
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Corsair Air 740
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    100 Mb/s Download and 10 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Lite-On iHBS212 12x BD Writer
    Creative F200 webcam
    Samsung CLX-3175FW Printer
    Linksys EA9500 Router
    Arris SB6190 Cable Modem
    APC SMART-UPS RT 1000 XL

73gitane

New Member
Posts
3
#6
I don't understand, I want to Enable Changing Security Zone Level Settings in Internet Explorer just as the title implies.

Thanks,
Steve
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    Laptop
    System Manufacturer/Model Number
    Toshiba
    CPU
    Core i7
    Browser
    ie11

Brink

Administrator
Administrator
mvp
Posts
22,827
#7
True, but your last screenshot shows some other policy or registry value is set for this instead. If you have a restore point available dated before this happened, it'll be a quick fix.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom self built
    CPU
    Intel i7-3930K 3.2 Ghz (O/C to 4 Ghz)
    Motherboard
    ASRock X79 Extreme11
    Memory
    32 GB (8GBx4) G.SKILL DDR3 Quad PC3-19200 2400 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    SB Recon 3Di Integrated Chip
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    256GB OCZ Vector
    6TB WD Black WD6001FZWX
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Corsair Air 740
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    100 Mb/s Download and 10 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Lite-On iHBS212 12x BD Writer
    Creative F200 webcam
    Samsung CLX-3175FW Printer
    Linksys EA9500 Router
    Arris SB6190 Cable Modem
    APC SMART-UPS RT 1000 XL

K2018

New Member
Posts
1
#8
Hi @Brink, although your post is almost 4 years old I have a question. Is there another way to deinstall the above registry key? Other than using a restore point? I installed the key in a windows 10 (virtual) pc, but I want to undo it.
UPDATE: I already found out how to change it.
 
Last edited:

My Computer

System One

  • OS
    Windows 10
    Computer type
    Laptop

Brink

Administrator
Administrator
mvp
Posts
22,827
#9
:thumbsup:
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model Number
    Custom self built
    CPU
    Intel i7-3930K 3.2 Ghz (O/C to 4 Ghz)
    Motherboard
    ASRock X79 Extreme11
    Memory
    32 GB (8GBx4) G.SKILL DDR3 Quad PC3-19200 2400 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    SB Recon 3Di Integrated Chip
    Monitor(s) Displays
    3 x 27" Asus VE278Q
    Screen Resolution
    1920x1080
    Hard Drives
    256GB OCZ Vector
    6TB WD Black WD6001FZWX
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Corsair Air 740
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master
    Internet Speed
    100 Mb/s Download and 10 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Lite-On iHBS212 12x BD Writer
    Creative F200 webcam
    Samsung CLX-3175FW Printer
    Linksys EA9500 Router
    Arris SB6190 Cable Modem
    APC SMART-UPS RT 1000 XL