You cannot update a custom Web site to the security zone if you log on to a Windows Server 2003-based server by using a remote desktop connection

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry


If you log on to a Microsoft Windows Server 2003-based server, you cannot update the security zone from a Group Policy object (GPO). This symptom occurs if the following conditions are true:
  • You log on to a Windows Server 2003-based server by using a remote desktop connection.
  • The Start the following program on connection option is selected.


Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, follow these steps:
  1. Create an Iegpo.vbs script with the following code.

    Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.
    Option Explicit
    Dim WshShell , objEnv , strCmdLine , strVersion , strLocale
    Set WshShell = WScript.CreateObject("WScript.Shell")
    Set objEnv = WshShell.Environment("process")

    strCmdLine = ObjEnv.Item("SystemRoot") & "\system32\ie4uinit.exe"
    WScript.Echo strCmdLine
    WshShell.Run strCmdline , 1, TRUE

    strVersion = WshShell.RegRead ("HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version")
    WshShell.RegWrite "HKCU\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version" , strVersion,"REG_SZ"
    strLocale = WshShell.RegRead ("HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale")
    WshShell.RegWrite "HKCU\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale" , strLocale,"REG_SZ"

    strCmdLine = "rundll32 iedkcs32.dll,BrandExternal ;*0<" & _
    objEnv.Item("APPDATA") & _
    "\Microsoft\Internet Explorer\Custom Settings"
    WScript.Echo strCmdLine
    WshShell.Run strCmdline , 1, TRUE
  2. Run the Iegpo.vbs script. To run the Iegpo.vbs script, follow these steps:
    1. Click Start, and then click
    2. In the Open box, type cscript Iegpo.vbs, and then click OK.

More Information

The Iegpo.vbs script performs the following tasks:
  1. The Iegpo.vbs script copies the following registry key from HKEY_LOCAL_MACHINE to HKEY_CURRENT_USER:
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version
    • HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale
  2. The Iegpo.vbs script runs the following command:
    rundll32 iedkcs32.dll,BrandExternal ;*0<%APPDATA%\Microsoft\Internet Explorer\Custom Settings

ID do Artigo: 899270 - Última Revisão: 15 de fev de 2017 - Revisão: 2