none
IE 11 Internet zone security setting via GPO RRS feed

  • Question

  • Hi,

    I would like to use GPO to set the Internet zone security to "Medium High". It seems that the below 2 tags are related: 

    Locked-Down Internet Zone Template, Internet Zone Template

    The above 2 tags exist in the below path:

    Local Computer Policy>Computer Configuration>Administrative Templates>Windows Components>Internet Explorer>Internet Control Panel>Security Page

    What is the differences between Locked-Down Internet Zone Template and Internet Zone Template?

    Which tag should be used?

    Thanks

     

    Friday, September 2, 2016 2:56 AM

Answers

  • Hi,

    The Lockdown_Zones settings for the other zones (Intranet, Internet, etc.) are used to support a feature called “Network Protocol Lockdown” (NPL).  This can be used to force content received over less-commonly used URL schemes to be provided restricted permissions.  http: and https: are the most common URL schemes.  Less common schemes include ftp:, file:, mailto:, shell:, and application-defined pluggable protocols.  NPL restrictions are off by default, but administrators may choose to enable lockdown zones for specific applications and URL schemes to help reduce attack surface.


    More information about NPL can be found here:


    http://technet2.microsoft.com/windowsserver/en/library/44a1af75-935b-4cc2-97cd-da3b7e8bfc891033.mspx


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, September 5, 2016 6:59 AM
    Owner