Configuring Zones Using Group Policy

To manage security zones in an enterprise, use the Group Policy settings located at \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel \Security Page under both Computer Configuration and User Configuration. Using these settings, you can configure the exact rights applied to each zone. To assign a standard security level (Low, Medium Low, Medium, Medium High, or High) to a zone, enable one of the following settings:

• Internet Zone Template
• Intranet Zone Template
• Local Machine Zone Template
• Restricted Sites Zone Template
• Trusted Sites Zone Template

If none of the standard security levels provides the exact security settings you need, you can edit the settings in the appropriate zone's node within the Security Page node. In particular, notice the Turn On Protected Mode setting located in each zone's node.

To specify that a URL is part of a specific zone, enable the Site To Zone Assignment List setting in the Security Page node. After you have enabled a URL, you can assign it (using the Value Name field, with an optional protocol) to a specific zone (using the Value field) using the zone's number:

• 1: Local Intranet zone
• 2: Trusted Sites zone
• 3: Internet zone
• 4: Restricted Sites zone