Privacy setting in the Registry

[Deane]

Hi.
Can anyone tell me, or refer me to a site which explains,
how and where in the Registry the MSIE Internet Options
Privacy setting--the one which controls cookies--is stored?
I've found two REG_BINARY values under
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\3 which seem to change when the setting is
changed, but the values are large, and the changes don't
seem to follow any pattern or plan that I can discern. I
tracked these two down using REGMON. Is it possible there
is some other, simpler, change being made that REGMON
misses?
Thanks!
Deane

 

[Robert Aldwinckle]

Is it possible there is some other, simpler, change being made

that REGMON misses?

Perhaps. E.g. maybe whatever it is that provides persistence
is written into the registry at the last moment when the application
is closing. In that case you could fall back on the diagnostic technique
we used to use before RegMon: export a branch that you thought
was involved; make your change; close IE (and verify iexplore.exe
is no longer an active process); export the same branch to a different file;
do an fc of the two exported files. Often when you do this you may find
that what is changing is only a single bit in a huge bitstring; (that's if
you're lucky <eg>); otherwise you may find that it is a set of bits
in several bitstrings which were changed, so then you have to do more
testing and analysis to figure out if all of them were due to your test.


BTW there is some description about the branch that you mentioned
in this article:

<title>KB182569 - Description of Internet Explorer Security Zones Registry Entries</title>


Good luck

Robert Aldwinckle