Security Zones: Do not allow users to change policies

Information

Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.

If you enable this policy the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled.

If you disable this policy or do not configure it users can change the settings for security zones.

This policy prevents users from changing security zone settings established by the administrator.

Note: The 'Disable the Security page' policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel) which removes the Security tab from Internet Explorer in Control Panel takes precedence over this policy. If it is enabled this policy is ignored.

Also see the 'Security zones: Use only machine settings' policy.

Solution

Policy Path: Windows Components\Internet Explorer
Policy Setting Name: Security Zones: Do not allow users to change policies

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-server-2022-security-baseline/ba-p/2724685

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5

Plugin: Windows

Control ID: 17cacce330db97d51ded446206ceb2b45ccd20ab0a86ba0588edd647e23f26fe