Hi,

Is it possible to change all the settings under IE->Tools->Internet
Options->Security Tab->Internet and Local Intranet to "Enable" using a Script?

Thanks for the help.
Harsh

Re: Script to change the secirity settings by mayayana

mayayana
Tue May 08 18:42:25 CDT 2007


> Is it possible to change all the settings under IE->Tools->Internet
> Options->Security Tab->Internet and Local Intranet to "Enable" using a
Script?
>
Yes. But it would be very dumb or very devious,
depending on who's settings you're changing. It
would leave IE open to virtually any script or ActiveX
running from anywhere.



Re: Script to change the secirity settings by T3chi3

T3chi3
Wed May 09 12:54:02 CDT 2007

Thanks for the reply.

I am trying to change the current user setting, to avoid the popups/warning
messages. I dont mind these being enabled as the machine on which i'll be
using this will have no access to the Internet.

Please help.
Thanks again.

"mayayana" wrote:

>
> > Is it possible to change all the settings under IE->Tools->Internet
> > Options->Security Tab->Internet and Local Intranet to "Enable" using a
> Script?
> >
> Yes. But it would be very dumb or very devious,
> depending on who's settings you're changing. It
> would leave IE open to virtually any script or ActiveX
> running from anywhere.
>
>
>

Re: Script to change the secirity settings by mayayana

mayayana
Wed May 09 15:08:08 CDT 2007


>
> I am trying to change the current user setting, to avoid the
popups/warning
> messages. I dont mind these being enabled as the machine on which i'll be
> using this will have no access to the Internet.
>
I see. You probably shouldn't change the Internet
zone settings then. IE has 5 zones. Internet is Zone 3.
Local Zone, which isn't typically visible, is Zone 0.
Intranet is 1 or 2. I don't remember which offhand.
Restricted Zone is 4. So you can usually change Zones
0-2 to reduce restrictions on your own system or local
network, while leaving Zones 3,4 restrictive to provide
better safety online.

The settings are fairly complex. Microsoft has listings
of the values somewhere, but I don't have a link offhand.
See here for a general explanation:

http://www.jsware.net/jsware/iewacky.php3#iesec

(If you have XP SP2 then also see the "nag fixer" download
and the info. for scripters on that webpage.)

Also see here for a VBScript/HTA utility:
http://www.jsware.net/jsware/iemd.php3

The VBScript in that utility demonstrates accessing a lot
of IE settings. If you can't find a specific one you can just
try changing it in IE to see what changes in the Registry.
The Registry settings for security are mainly numeric,
so they're not self-explanatory. The value names are
things like "1604" or "1201". The data is DWord. 0 is
enabled. 1 is prompt. 3 is disabled. (In most cases.)

So change the setting of interest in IE and then look
here:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones

Open the appropriate subkey for the zone that you just set
and compare the values before and after changing the setting.
That way you can figure out which value is the one you want.

(While you're there, set the Flags value in the Zones/0
key to 33 in order to make the Local Zone visible in your
IE settings.)

-------------------------
Here's a sampling (but not an exhaustive list)
of the sort of settings you're looking for. The available settings
vary with each version of IE, but the general system doesn't.

1001 Download signed ActiveX controls
1004 Download unsigned ActiveX controls
1200 Run ActiveX controls and plug-ins
1201 Initialize and run ActiveX controls and plug-ins not marked
as
safe
1400 Active scripting
1402 Scripting of Java programs
1405 Script ActiveX controls marked as safe for scripting
1406 Access data sources across domains
1407 Allow paste operations via script
1601 Submit non-encrypted form data
1604 Font download
1605 Unknown
1606 User Data persistence
1607 Navigate sub-frames across different domains
1800 Installation of desktop items
1802 Drag and drop or copy and paste of files
1803 File Download
1804 Load applications and files in an IFRAME
1805 Unknown

Each of those values in the Registry, like "1803" will
have a DWord data setting.

---------------------
I hope that's all clear. It's a very complex system, not easy
to explain in a newsgroup post. If you don't figure it out
from what I've posted you might want to search for Microsoft's
docs.



Re: Script to change the secirity settings by T3chi3

T3chi3
Wed May 09 16:05:00 CDT 2007

Thanks a lot for being so helpful.
I should be able to take it from here.

Have a great evening !!

"mayayana" wrote:

>
> >
> > I am trying to change the current user setting, to avoid the
> popups/warning
> > messages. I dont mind these being enabled as the machine on which i'll be
> > using this will have no access to the Internet.
> >
> I see. You probably shouldn't change the Internet
> zone settings then. IE has 5 zones. Internet is Zone 3.
> Local Zone, which isn't typically visible, is Zone 0.
> Intranet is 1 or 2. I don't remember which offhand.
> Restricted Zone is 4. So you can usually change Zones
> 0-2 to reduce restrictions on your own system or local
> network, while leaving Zones 3,4 restrictive to provide
> better safety online.
>
> The settings are fairly complex. Microsoft has listings
> of the values somewhere, but I don't have a link offhand.
> See here for a general explanation:
>
> http://www.jsware.net/jsware/iewacky.php3#iesec
>
> (If you have XP SP2 then also see the "nag fixer" download
> and the info. for scripters on that webpage.)
>
> Also see here for a VBScript/HTA utility:
> http://www.jsware.net/jsware/iemd.php3
>
> The VBScript in that utility demonstrates accessing a lot
> of IE settings. If you can't find a specific one you can just
> try changing it in IE to see what changes in the Registry.
> The Registry settings for security are mainly numeric,
> so they're not self-explanatory. The value names are
> things like "1604" or "1201". The data is DWord. 0 is
> enabled. 1 is prompt. 3 is disabled. (In most cases.)
>
> So change the setting of interest in IE and then look
> here:
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones
>
> Open the appropriate subkey for the zone that you just set
> and compare the values before and after changing the setting.
> That way you can figure out which value is the one you want.
>
> (While you're there, set the Flags value in the Zones/0
> key to 33 in order to make the Local Zone visible in your
> IE settings.)
>
> -------------------------
> Here's a sampling (but not an exhaustive list)
> of the sort of settings you're looking for. The available settings
> vary with each version of IE, but the general system doesn't.
>
> 1001 Download signed ActiveX controls
> 1004 Download unsigned ActiveX controls
> 1200 Run ActiveX controls and plug-ins
> 1201 Initialize and run ActiveX controls and plug-ins not marked
> as
> safe
> 1400 Active scripting
> 1402 Scripting of Java programs
> 1405 Script ActiveX controls marked as safe for scripting
> 1406 Access data sources across domains
> 1407 Allow paste operations via script
> 1601 Submit non-encrypted form data
> 1604 Font download
> 1605 Unknown
> 1606 User Data persistence
> 1607 Navigate sub-frames across different domains
> 1800 Installation of desktop items
> 1802 Drag and drop or copy and paste of files
> 1803 File Download
> 1804 Load applications and files in an IFRAME
> 1805 Unknown
>
> Each of those values in the Registry, like "1803" will
> have a DWord data setting.
>
> ---------------------
> I hope that's all clear. It's a very complex system, not easy
> to explain in a newsgroup post. If you don't figure it out
> from what I've posted you might want to search for Microsoft's
> docs.
>
>
>

Re: Script to change the secirity settings by Michael

Michael
Wed May 09 18:11:11 CDT 2007

> The settings are fairly complex. Microsoft has listings
> of the values somewhere, but I don't have a link offhand.

Description of Internet Explorer Security Zones Registry Entries
http://support.microsoft.com/default.aspx?kbid=182569

--
Michael Harris
Microsoft.MVP.Scripting



Re: Script to change the secirity settings by T3chi3

T3chi3
Fri May 11 09:17:00 CDT 2007

Thanks for the link, Michael !!

"Michael Harris (MVP)" wrote:

> > The settings are fairly complex. Microsoft has listings
> > of the values somewhere, but I don't have a link offhand.
>
> Description of Internet Explorer Security Zones Registry Entries
> http://support.microsoft.com/default.aspx?kbid=182569
>
> --
> Michael Harris
> Microsoft.MVP.Scripting
>
>
>