Re: IE6 ZoneMap & FEATURE_LOCALMACHINE_LOCKDOWN

[[Forwarded to Windows Server Security newsgroup via crosspost]]

John wrote:
> Good Afternoon Group,
>
> I have a 2003 Server SP1 with IE6. This server is configured as a terminal
> server. There is a need for the security settings to be adjusted to get an
> application that works with InternetExplorer. I need to enable the 'Allow
> active content to run in files on My Computer'
> (Options/Advanced/Security).
> Internet Explorer Enhanced Security is installed. Through the registry I
> have enabled the Security_HKLM_only
> (HKLM\Software\Policies\Microsoft\Windows\CurrentV ersion\Internet
> Settings)
> option so IE will get its setting from HKLM. To achieve the enabling of
> 'Allow active content to run in files on My Computer' I have edited
> HKLM\Software\Microsoft\Internet
> Explorer\Main\Feature\FEATURE_LOCALMACHINE_LOCKDOW N\iexplore.exe=0. What I
> am seeing is that this registry setting does not place a check mark next
> to
> the 'Allow active content to run in files on My Computer' setting within
> IE.
> Is there some other setting I need to do to get this working ?
>
> Cheers
>
> John