Using Internet Security Zones

Internet Security Zones offer a means of separating Web sites you do trust from those you don't. You have four different security zones to choose from:

• Internet: Every Internet Web site you visit automatically falls into the Internet security zone unless you move it to another zone.
• Local Intranet: In large networks that have their own non-Internet Web sites, every Web site within that network automatically falls into the Intranet zone.
• Trusted Sites: Initially, no sites fall into this category. But you can move any trusted site into this category so that you don't get a security warning every time you visit.
• Untrusted Sites: Initially, no sites fall into this category, either. But you can move anyWeb site that you use but don't fully trust into this zone to enforce maximum security.

To get to the Security Zones dialog box, choose Tools → Internet Options from Internet Explorer's menu. Then click the Security tab.

Each zone has its own security settings. Click one of the security zone icons near the top of the dialog box. The slider under Security Level for This Zone changes to show that zone's security level. For example, the security level for the Internet zone is Medium-High. This is the default setting and is appropriate for the vast majority of Web sites you're likely to visit. Characteristics of the security level include:

• Internet Explorer Protected Mode Enabled: In Protected Mode, Internet Explorer protects your computer from malware (malicious software) that could harm your computer. It also allows you to install safe downloaded software from a standard user account.
• Prompts before Downloading Potentially Unsafe Content: Displays a warning whenever you're about to download potentially unsafe software. If you trust the software you're about to download, it won't prevent you from doing so. But it will prevent bad Web sites from sneaking malware onto your computer without your knowledge.
• Unsigned ActiveX Controls Will Not Be Downloaded: An ActiveX control is like a tiny program that can make your computer do things. (Web pages and pictures can't make your computer do things.) A signed ActiveX control is one in which the author of the control can be identified and held accountable for any harm it causes.

There probably is no reason to change the Security level for the Internet zone. If you have an account at a trusted Web site that won't work properly with these settings, it's really not necessary to lower the security level for all sites just to accommodate that one site. Instead, you can put that site in your Trusted Sites zone and lower the security settings there. (More on the Trusted Sites zone in a moment.)

Rather than settle for one of the security levels along the slider, you can click Custom Level and define your own security restrictions for the zone. The Trusted Sites zone is where you can put Web sites you trust that don't work properly in the Internet zone. To put a site in that zone, click the Trusted Sites icon and click Sites. Type the site's URL (if it isn't already in the box) and click Add. By default, you're limited to adding secure sites to that zone. A secure site is one whose address starts with https:// rather than http://. But you can eliminate that restriction by deselecting the Require Server (https://) for All Sites in This Zone'' check box. The security level for Trusted sites is Medium. You can reduce that to Medium-Low or Low.

Use the Restricted Sites zone for sites you visit regularly but don't really trust. The security level for Restricted sites is High, which will make it extremely difficult for the Web site to sneak anything past you.