Adding Trusted site for all users

[Bharat]

Hello -
I am trying to push a CAB file on to my client machines with IE 6.0 on
the intranet. Most of the machines are win2k and a few are nt 4.0
workstations. To push the CAB file when the user comes to my
site(http:\\MyInternalApp) I need to add my URL (http:\\MyInternalApp)
as a trusted site. The reason I need this is because, my web site
users will not have lot of permissions on the client machine and their
profile is set such a way that even my internally signed CAB file will
not be "PROMPTED". This is because "Download signed activeX control"
is disabled in the internet settings. To work around this issue, I am
trying to add my URL as trusted site in their registry using SMS. My
engineering team is willing to do that. But here is my problem: Some
of these clent machines already have http:\\MyInternalApp as trusted
site under current user registry key (HKCU). I 'think' if the
engineering team adds 'http:\\MyInternalApp' under
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains' IE will get confused and does not behave
properly. I do not have good understanding what this misbehavier can
be. So, engineering team needs to delete existing registry keys under
Hkey_USERS and then add the key under HKLM. They are having a bit of
challenge in deleting the registry key from all users registry
settings. My question is "Is there an easy way delete a registry key
for all users?" or Can I move forward with adding my
http:\\myinteralapp to HKLM registry key (SMS will add the key
irrespective of how IE behaves, as Registry will let it).

Any suggestions/ideas/pointer to other web sites on this topic are
appreciated.

Thank you,
Bharath

 

[H Leboeuf]

Mike Burgess has created a way to add and deleted sites from the restricted
area.
http://www.mvps.org/winhelp2002/restricted.htm

You may be able to learn from it and achieved your end.

 

[Mike Burgess]

Bharat,
The HKLM entry takes precedence over HKCU (even when both exist).
Taking a hint from my "domains.reg" and "undodomains.reg" files
http://www.mvps.org/winhelp2002/restricted.htm
you should be able to create one small reg file that will remove the HKCU
entries while adding the needed HKLM entries.

You may also want to consider adding the below to prevent any users
from making changes, or a possible hijack attempt.

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
net Settings]
"Security_HKLM_only"=dword:00000001
"Security_options_edit"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Inter
net Settings]
"SecChangeSettings"=dword:00000001
"SecAddSites"=dword:00000001

____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 11-04-03]
Please post replies to this Newsgroup, email address is invalid
--