You are currently offline, waiting for your internet to reconnect

Your browser is out-of-date

You need to update your browser to use the site.

Update to the latest version of Internet Explorer

Group Policy Editor security-zone setting modifications do not appear in the client in Windows Server 2003, in Windows XP, and in Windows 2000

Support for Windows XP has ended

Microsoft ended support for Windows XP on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article was previously published under Q311511
Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
SYMPTOMS
When you modify the security-zone settings in Group Policy Object Editor (Gpedit.msc) and then quit the editor, the security-zone settings may not apply to client computers, and the Seczones.inf file under SYSVOL may not have been updated.
CAUSE
This behavior may occur when the technical computer (which runs Group Policy Object Editor) has the Security_HKLM_only value in the following registry key enabled:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
If this key is enabled, only machine settings are used, and usersettings are not used.
RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To work around this behavior, use either of the following methods:

Method 1

  1. Click Start, click Run, type gpedit.msc, and then click OK.
  2. Open Computer Configuration, open Administrative Templates, open Windows Components, and then open Internet Explorer.
  3. Change the Security Zones: Use only machine settings setting to Disabled, and then close Gpedit.msc.

Method 2

Use Registry Editor (Regedit.exe in Windows Server 2003, Regedt32.exe in Windows XP and Windows 2000) to delete the Security_HKLM_only value in the following registry key, and then quit Registry Editor:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
MORE INFORMATION
For additional information about a similar issue, click the following article number to view the article in the Microsoft Knowledge Base:
292762 The importation of Uniform Resource Locators from security zones is unsuccessful
Properties

Article ID: 311511 - Last Review: 11/01/2006 15:49:08 - Revision: 4.2

  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
  • Microsoft Windows 2000 Server
  • kbenv kbprb kbui KB311511
Feedback