Make some change in Internet option automatically

M

mahmoudmga

Hi
I want to make some change in internet option , security tab:
Tools \ Internet Options \ Security \ Internet \ Sites \ Advanced ==>
add a specific site to the zone.

Tools \ Internet Options\ Security \ Internet \ Custom Level:
* Initialize and script ActiveX controls not marked as safe for
scripting ==> Enable
* Automatic prompting for file downloads ==> Enable
* Allow script-initiated windows without size or position constraints
==> Enable

*Use pop-up Blocker ==> Disable
* Display video and animation on a webpage that does not use external
media player ==> Disable
* only allow approved domains to use ActiveX without prompt ==>
Disable

How do i can this change Automatically by Registery.
Or i want make an application that makes these changes automatically.

Thanks.
 
G

Goobus

Hi
I want to make some change in internet option , security tab:
Tools \ Internet Options \ Security \ Internet \ Sites \ Advanced ==>
add a specific site to the zone.

Tools \ Internet Options\ Security \ Internet \ Custom Level:
* Initialize and script ActiveX controls not marked as safe for
scripting ==> Enable
* Automatic prompting for file downloads ==> Enable
* Allow script-initiated windows without size or position constraints
==> Enable

*Use pop-up Blocker ==> Disable
* Display video and animation on a webpage that does not use external
media player ==> Disable
* only allow approved domains to use ActiveX without prompt ==>
Disable

How do i can this change Automatically by Registery.
Or i want make an application that makes these changes automatically.

Thanks.
Ask in the IE newsgroup.
 
T

Tim Meddick

You can't add individual "specific" sites to the "Internet Zone".

You may only specify sites and add them to either the "Trusted" or the
"Restricted" zones.

To do this in the registry - go to

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains

....and add and name a new-key under here to the internet address of the
site you want to add.

e.g. (nastypics.com)

Then, if the site requires the "www." before it's site-name, create
another sub-key named www.

e.g. (nastypics.com\www)

Finally create a new dword value under the ("www" key if it has it) or (the
under it's main key "nastypics.com") and name this dword value: *

Give this new * a value of 2 to make it a Trusted Site, or assign it 4 to
make it part of the "Restricted Sites".

But, to the other part of your question, I can be more specific;

Create a new batch-file (a text-file with the BAT extension instead of TXT)
and into it copy and paste all of the following :

------------------- copy between lines -------------------

@echo off
SETLOCAL
set TMPREG=HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Zones\3
echo.
echo Re-setting Internet Security Settings;
echo.
echo Run unsafe ActiveX: Enable
echo Pop-up Blocker: Disable
echo.
reg ADD "%TEMPREGKEY%" /v 1201 /t REG_DWORD /d 0 /f
reg ADD "%TEMPREGKEY%" /v 1809 /t REG_DWORD /d 3 /f


------------------- copy between lines -------------------


*NB The second line beginning with the "set" command should end with
"Zones\3" but may not appear that way due to line-wrap of this post.

Save and run the batch file to automatically re-set your requested custom
settings for the internet zone to :

ENABLE: Running ActiveX not marked as safe.
DISABLE: Pop-up blocker.


(To reverse the settings made by the batch-file, make another batch-file
and name it slightly differently, say, with the word "undo", and again
paste the script above into it. But reverse the numerical values thus ; )

reg ADD "%TEMPREGKEY%" /v 1201 /t REG_DWORD /d 3 /f
reg ADD "%TEMPREGKEY%" /v 1809 /t REG_DWORD /d 0 /f


P.S. I have uploaded the above batch-file and it's related undo script, to
the 4Shared.com web-site. Here is the link to the download page to get the
file : IE_Security_Settings.zip which contains both files plus regular
reg-file counterparts for both.

http://www.4shared.com/file/ajAECd8V/IE_Security_Settings.html

==

Cheers, Tim Meddick, Peckham, London. :)
 
G

glee

mahmoudmga said:
Hi
I want to make some change in internet option , security tab:
Tools \ Internet Options \ Security \ Internet \ Sites \ Advanced ==>
add a specific site to the zone.

Tools \ Internet Options\ Security \ Internet \ Custom Level:
* Initialize and script ActiveX controls not marked as safe for
scripting ==> Enable
* Automatic prompting for file downloads ==> Enable
* Allow script-initiated windows without size or position constraints
==> Enable

*Use pop-up Blocker ==> Disable
* Display video and animation on a webpage that does not use external
media player ==> Disable
* only allow approved domains to use ActiveX without prompt ==>
Disable

How do i can this change Automatically by Registery.
Or i want make an application that makes these changes automatically.

Thanks.

Looking for help to get you malware to run without triggering any
prompts?
:)
 
T

Tim Meddick

I do apologise; I changed the variable name in the second line and then
forgot to change it later on.

Here is the correct script......


------------------- copy between lines -------------------

@echo off
SETLOCAL
set
TMPREG=HKCU\Software\Microsoft\Windows\CurrentVersion\InternetSettings\Zones\3
echo.
echo Re-setting Internet Security Settings;
echo.
echo Run unsafe ActiveX: Enable
echo Pop-up Blocker: Disable
echo.
reg ADD "%TMPREG%" /v 1201 /t REG_DWORD /d 0 /f
reg ADD "%TMPREG%" /v 1809 /t REG_DWORD /d 3 /f


------------------- copy between lines -------------------


*NB The script download remains unaffected by this error.
http://www.4shared.com/file/ajAECd8V/IE_Security_Settings.html

==

Cheers, Tim Meddick, Peckham, London. :)
 
M

mahmoudmga

Hello Glee
I have an web base application that needs to these setting and i don't
want users make these changes manually , so i decide make this changes
automatically.
can you help me ?
 
T

Tim Meddick

An alternative to the batch-file method of setting the registry entries
required to change the Internet Explorer settings you mentioned, is to
export [save] the relevant section of the registry with [regedit.exe] and
then, whenever you want the settings changed, just import the reg-file
using the [/S] switch to avoid the confirmation dialog.

The relevant section of the registry being :

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\Zones\3]

...this registry-key holds all the settings you find in :

Internet Options > Internet > Custom Settings

....So then, you must set those settings to exactly how you want them, then
next, open regedit at the key specified above and select : "File > Export"
from the main menus, then save it somewhere giving it a name that reflects
it's purpose (such as IESETING.reg).

But also, you should go back and re-set the Internet Options back to their
"default" state, then repeat the export process outlined above again, this
time naming the resulting file something like : IEUNDO.reg

Now you will be able to import either of the saved reg-files to either set
to your custom settings or re-set [undo] back to their defaults by issuing
the command :

regedit.exe /s IESETING.reg
regedit.exe /s IEUNDO.reg

(*NB remember to close and then re-start your any open Internet Explorer
browsers to take-up the new settings)

==

Cheers, Tim Meddick, Peckham, London. :)
 
G

glee

mahmoudmga said:
Hello Glee
I have an web base application that needs to these setting and i don't
want users make these changes manually , so i decide make this changes
automatically.
can you help me ?

Will this application be run via an Intranet, or over the Internet?

A web-based application should not be automatically changing user's
browser security settings remotely. Doing so will compromise the
browser security and in turn the entire system's security, as you are
proposing putting the users' Internet Zone settings to the lowest
safety.

You should be writing the application in a web application framework
that allows it to run without changing basic browser security.

Have you studied web-based application development and design?
Web-Based Application Development (9780763759407): Ralph F. Grove:
http://www.amazon.com/Web-Based-Application-Development-Ralph-Grove/dp/0763759406
 
T

Tim Meddick

And to answer your question about changing the Internet Zone Settings
remotely on another PC...

You need to create the batch-file as described in my earlier posts in this
tread, then download the small [free] command-line application
"psexec.exe" - part of the wonderful "pstools" from Sysinternals (a
division of Microsoft).

Use [psexec.exe] to execute the batch-script on the remote PC.

After copying the contents of the zip-file [pstools.zip] to a directory
that's included in your "path" variable (e.g. WINDOWS\system32 ) open a
command-prompt (by typing cmd.exe into the "Run" box on the Start Menu) and
then type : PSEXEC /? for instructions and syntax on it's usage.

Download the PStools suite of command-line utilities from :
http://download.sysinternals.com/Files/PsTools.zip

==

Cheers, Tim Meddick, Peckham, London. :)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top