RE: Active X problem

From: Tim [MSFT] (Tcole_at_online.microsoft.com.)
Date: 12/27/03


Date: Sat, 27 Dec 2003 01:02:51 GMT

Hi Cherri,

It appears that you have somehow changed the Internet Explorer security
settings for the Local Machine Zone on your computer.

Internet Explorer uses security zones to restrict Web content from
performing potentially damaging operations on your computer based on the
location (zone) of the Web content. For example, Web pages in the Internet
zone have stricter security restrictions than Web pages in the Trusted and
Local intranet zones.

Content in the Local Machine zone, except for content that Internet
Explorer caches on your local computer, is treated with a higher level of
trust than content in the Local intranet, Internet, Trusted sites, and
Restricted sites zones. As a result, a malicious user may try to take
advantage of the power of the Local Machine zone to elevate their
privileges and run arbitrary code on your computer.

The Local Machine zone is an implicit zone for content that exists on your
local computer. The Local Machine zone is not exposed in the Internet
Options control panel. However, the settings for this zone can be
configured by an administrator using registry settings.

You can only remedy this problem by directly editing the system registry on
your machine or loading the correct registry settings from a .reg file.

To reset default settings for the Local Machine zone
1. Copy the text below, and then paste it into a text editor (such as
Notepad):

                REGEDIT4
                
                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0]
                
                "1200"=dword:00000000
                "1201"=dword:00000001
                "1400"=dword:00000000
                "1406"=dword:00000000
                "1C00"=hex:00,00,02,00
                
                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\0]
                
                "1200"=dword:00000000
                "1201"=dword:00000001
                "1400"=dword:00000000
                "1406"=dword:00000000
                "1C00"=hex:00,00,02,00
                
                
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
net Settings]
                
                "Security_HKLM_only"=dword:00000001
                
2. Save the file as DefaultLMZ.reg.
3. Run DefaultLMZ.reg on your computer to import the strengthened settings
into the registry.

Regards,
Tim [MSFT]
tcole@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Content-Class: urn:content-classes:message
>From: "Cherri" <anonymous@discussions.microsoft.com>
>Sender: "Cherri" <anonymous@discussions.microsoft.com>
>Subject: Active X problem
>Date: Fri, 26 Dec 2003 09:52:23 -0800
>Lines: 6
>Message-ID: <008801c3cbd9$044eca00$a301280a@phx.gbl>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
>Thread-Index: AcPL2QRODThsMF+lRha+5iZJrsRkLA==
>Newsgroups: microsoft.public.win2000.security
>Path: cpmsftngxa07.phx.gbl
>Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.security:18432
>NNTP-Posting-Host: tk2msftngxa11.phx.gbl 10.40.1.163
>X-Tomcat-NG: microsoft.public.win2000.security
>
>On my Windows ME system, all of my desktop icons except
>the default Windows icons are missing. If I click on any
>of the existing icons, I get a message "Your current
>security settings prohibit active x controls from
>running..." I can't even get the start menu to work.
>Help!!
>



Relevant Pages

  • RE: Home Page Format Changed (Msnbc.msn.com)
    ... It is possible that your browser is accessing the page directly from your ... Every time you log on to the Internet, ... Reconfigure your Security Settings ...
    (microsoft.public.windowsupdate)
  • [NT] Vulnerability in Microsoft Agent Allows Spoofing (MS05-032)
    ... Get your security news from a reliable source. ... This vulnerability could enable an attacker to spoof trusted Internet ... this risk by modifying many security-related settings. ... the security level for all Web sites you visit to High. ...
    (Securiteam)
  • Re: Medium setting in IE ok for home user?
    ... > It is ok for a home user on WinXP to set IE6's Security Settings to ... There is a very good explanation of how you should have your internet ... uncheck this you can't enter non-secure sites in this list. ...
    (comp.security.misc)
  • Re: Medium setting in IE ok for home user?
    ... > It is ok for a home user on WinXP to set IE6's Security Settings to ... There is a very good explanation of how you should have your internet ... uncheck this you can't enter non-secure sites in this list. ...
    (comp.security.firewalls)
  • Re: Medium setting in IE ok for home user?
    ... > It is ok for a home user on WinXP to set IE6's Security Settings to ... There is a very good explanation of how you should have your internet ... uncheck this you can't enter non-secure sites in this list. ...
    (alt.computer.security)