MBSA: IE Zones critical risk

[Guest]

in the Desktop Application Scan Results, the IE Zones has a critical check failed. i get this message:

IE Zones Internet Explorer zones do not have secure settings for some users.

Clicking on the Result Detail, i get this message:
Some or all of the user settings for the following zones are below the recommended level.
S-1-5-21-(i deleted this for security purposes)-1003 Internet Custom Medium

i only have two accounts, the administrator and a limited account. both account are set at the default setting. i check the registry and under HKEY User, i have the key HKEY_USERS\S-1-5-21-***-1005 and HKEY_USERS\S-1-5-21-***-1006. i don't see any -1003. does anyone know how to fix the setting so that i don't get this critical risk for IE Zones? i am running xp home edition.

 

[David Dickinson]

MBSA can be pretty paranoid sometimes. You have to check
some things manually everytime you run it just to be sure.

In this case if, for instance, you clicked "Don't show
this again" when warned about submitting non-encrypted
form data to a web site such as a search enging, then
MBSA detects this custom setting for the Internet
Security Zone as a critical problem.

Check your IE security settings. If they look okay then
forget about it until the next time that you run MBSA.
If you don't understand everything, then just click the
Default button.

One more thing: there's a newsgroup somewhere in this
tree that focuses on MBSA called "Baseline Analyser"
(microsoft.public.security.baseline_analyzer).

David Dickinson
eveningstar at mvps dot org
(Please reply only to the newsgroup)