IE Security Zones - Enable or Disable Level Settings

How to Enable or Disable Changing Security Zone Level Settings in Internet Explorer

information   Information
Zone security in Internet Explorer is a system that enables you to divide online content into categories, or zones. You can add or remove websites from the zones, depending on your level of trust in a website. Users can set default or custom level settings per security zone.

This tutorial will show you how to enable or disable all users to be able to change the Internet, Local intranet, Trusted sites, and Restricted sites security zone level settings in Internet Explorer.

You must be signed in as an administrator to be able to do the steps in this tutorial.

Note   Note
This could be handy to set the security zones to "default level" or a "custom level" settings you like, then disable it to prevent any changes by users.


EXAMPLE: IE Security Zone Level Settings Enabled and Disabled
IE_Security_Zone_Settings-1.jpg
IE_Security_Zone_Settings-2.jpg






OPTION ONE

Enable/Disable Changing Security Zone Level Settings using REG File


1. Do step 2 or 3 below for what you would like to do.​
2. To Enable Changing IE Security Zone Level Settings
NOTE: This is the default setting.​
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Enable_Changing_IE_Security_Zone_Level_Settings.reg
download
3. To Disable Changing IE Security Zone Level Settings
A) Click/tap on the Download button below to download the file below, and go to step 4 below.​
Disable_Changing_IE_Security_Zone_Level_Settings.reg
download

4. Save the .reg file to your desktop.
5. Double click/tap on the downloaded .reg file to merge it.
6. If prompted, click/tap on Run, Yes (UAC Windows 7/8) or Continue (UAC Vista), Yes, and OK.
7. When finished, you can delete the downloaded .reg file if you like.







OPTION TWO

Enable/Disable Changing Security Zone Level Settings using Group Policy


NOTE: This option for using group policy is only available in the Vista Business, Vista Ultimate, Vista Enterpise Windows 7 Professional, Windows 7 Ultimate, Windows 7 Enterprise, Windows 8 Pro, and Windows 8 Enterprise editions.
1. Press Windows+R to open the Run dialog, type gpedit.msc, and click/tap on OK.​
2. If prompted by UAC, then click/tap on Yes (Windows 7/8) or Continue (Vista).
3. In the left pane, click/tap on to expand Computer Configuration, Administrative Templates, Windows Components, and open Internet Explorer. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-1.jpg
4. In the right pane of Internet Explorer, double click/tap on Security Zones: Do not allow users to change policies. (see screenshot above)​
5. Do step 6 or 7 below for what you would like to do.​
6. To Enable Changing IE Security Zone Level Settings
A) Select (dot) Disabled or Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below step 7A)​
NOTE: Not Configured is the default setting.​
7. To Disable Changing IE Security Zone Level Settings
A) Select (dot) Enabled, click/tap on OK, and go to step 8 below. (see screenshot below)​
IE_Security_Zone_Settings_GPEDIT-2.jpg

8. You can now close the Local Group Policy Editor window if you like.​


That's it,
Shawn


 

Attachments

Last edited by a moderator:
Hi,

I have not had success with Option 1. I can't do Option 2 since I do no have Win8 Pro.

Have there been any issues using option1?

Thanks,
Steve
 
Last edited:
Hey thanks for the quick reply!

I get the nice warning that my registry will be edited:

Registry Editor.PNG

Then I get the message the registry was successfully edited:

Registry Editor Completed.PNG

But when I go to internet options to adjust security, custom level is still grayed out after a restart of IE and reseting the laptop:

Custom Level selection grayed out .PNG

Thanks,
Steve
 
I don't understand, I want to Enable Changing Security Zone Level Settings in Internet Explorer just as the title implies.

Thanks,
Steve
 
True, but your last screenshot shows some other policy or registry value is set for this instead. If you have a restore point available dated before this happened, it'll be a quick fix.
 
Hi @Brink, although your post is almost 4 years old I have a question. Is there another way to deinstall the above registry key? Other than using a restore point? I installed the key in a windows 10 (virtual) pc, but I want to undo it.
UPDATE: I already found out how to change it.
 
Last edited:
Back
Top