Information
If you enable this policy setting, you disable the Custom Level button and Security level for
this zone slider on the Security tab in the Internet Options dialog box. If this policy setting
is disabled or not configured, users will be able to change the settings for security zones. It
prevents users from changing security zone policy settings that are established by the
administrator.
Note- If you enable the Disable the Security page setting (located in \User
Configuration\
Administrative Templates\Windows Components\Internet Explorer\Internet
Control Panel) the Security tab is removed from Internet Explorer in Control Panel and
the Disable setting takes precedence over this Security Zones- setting. The recommended
state for this setting is- Enabled.
*Rationale*
Users who change their Internet Explorer security settings could enable the execution of
dangerous types of code from the Internet and Web sites that were listed in the Restricted
Sites zone in the browser.
Solution
To establish the recommended configuration via Group Policy, set the following UI path to
Enabled.
Computer Configuration\Administrative Templates\Windows Components\Internet
Explorer\Security Zones- Do not allow users to change policies
Default Value-Disabled