Possible Values for the "flags" entry HKCU\Software\Microsoft\Windows\CurrentVersion\InternetSettings\Zones\1 RRS feed





    typedef enum  { 
      ZAFLAGS_CUSTOM_EDIT               = 0x00000001,
      ZAFLAGS_ADD_SITES                 = 0x00000002,
      ZAFLAGS_REQUIRE_VERIFICATION      = 0x00000004,
      ZAFLAGS_NO_UI                     = 0x00000020,
      ZAFLAGS_UNC_AS_INTRANET           = 0x00000080,
      ZAFLAGS_DETECT_INTRANET           = 0x00000100,
      ZAFLAGS_USE_LOCKED_ZONES          = 0x00010000,
      ZAFLAGS_NO_CACHE                  = 0x00040000
    } ZAFLAGS;




    Wednesday, October 21, 2015 11:11 AM

All replies

  • Hi Harry,

    Hexidecimal v Decimal -

    The Flags DWORD value determines the ability of the user to modify the   security zone's properties. To determine the Flags value, add the numbers of the appropriate settings together. The   following Flags values are available (decimal):
       Value    Setting
       1        Allow changes to custom settings
       2        Allow users to add Web sites to this zone
       4        Require verified Web sites (https protocol)
       8        Include Web sites that bypass the proxy server
       16       Include Web sites not listed in other zones
       32       Do not show security zone in Internet Properties (default
                setting for My Computer)
       64       Show the Requires Server Verification dialog box
       128      Treat Universal Naming Connections (UNCs) as intranet


    you could use calc.exe to convert to hex values.



    • Proposed as answer by уᴏ mаmаBanned Tuesday, October 20, 2015 3:14 AM
    • Unproposed as answer by HarryNew Tuesday, October 20, 2015 3:01 PM
    Tuesday, October 20, 2015 12:42 AM
  • Hello Rob,

    thanks for your answer! Unfortunately it does not answer my question, though. I realize that we're looking at a bitmask. The highest value should be 11111111 = 255 (decimal) = FF (Hex).

    Yet we have computers that have the flags value set to 323 (in decimal). Obviously we would need an additional bit (256) to be able to represent this number in a bitmask. But if the bitmask has more than 8 bits then what do the additional bits stand for?

    Thanks & Regards


    Tuesday, October 20, 2015 3:12 PM
  • Hello,

    thanks for your answers but unfortunately they are off topic. I realize that 11111111 bin = 255 dec (no need to use a calculator for that *g*). I also realize that 323 > 255. And I am not trying to aqueeze 323 into an 8 bit bitmask either.

    When looking at the registry of a computer that just had it's IE9 updated to IE11 I see the flags value set to 323 (decimal). I didn't do it - the installation (or something else) did.

    So it seems that I'm looking at a bitmask that has more than 8 bits. But if that is true then what do the other bits stand for? The knowlegdebase article referenced above only lists 8 bits - maybe that's wrong or outdated?

    Thanks for your help!


    Wednesday, October 21, 2015 9:53 AM
  • Hello yo Mama ;-)

    excellent, this is exactly what I was looking for! So our additional bit tells the system to check / activate the "Automatically detect Intranet zone" checkbox.

    Thanks for your help!


    Wednesday, October 21, 2015 12:41 PM