Skip navigation

JSI Tip 4489. Group Policy Editor Security Zone setting changes do NOT appear on Windows 2000 Clients?

If you use the Group Policy Editor, gpedit.msc, to modify the Security Zone settings at
Computer Configuration / Administrative Templates / Windows Components / Internet Explorer, the settings may not apply to Windows 2000 clients? The Seczones.inf file in the SYSVOL may not be updated?

If the computer that is running gpedit.msc has the Security_HKLM_only value name set to 1 at
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings, this problem will occur.

To resolved this behavior, use one of the following on the computer that runs gpedit.msc:

- Run gpedit.msc at navigate to Computer Configuration / Administrative Templates / Windows Components / Internet Explorer. Disable the Use Only machine settings GPO.

- Use the Registry Editor to navigate to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings and delete the Security_HKLM_only Value Name.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.