I would like to set the IE security zone to Medium-high for all new users on a server.
This is a standalone machine and ultimately I'll need to script it. I don't mind making a registry change or updating the local security policy.
I've had some success updating HKCU
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\CurrentLevel
but that only applies to the current user. I see that it's possible to set IE to only use HKLM for all users, but I would rather not change that. I want to allow it to continue to use HKCU.
Where is the default key that is used when creating a new user? Or, can I use Local Security Policy, something like: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\something?
Best Answer
The key you're after should be:
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\CurrentLevelThis won't apply anything to existing users, but should be copied to new local users when a profile is created.