The issue is that the settings get changed, not that they cannot be changed.
We do not want the original custom HKLM registry settings on a client PC to
change when an admin logon to the Client PC for the first time. Any ideas?
Thanks.

"Frank Saunders, MS-MVP OE/WM" wrote:

> "dekac99" <dekac99@discussions.microsoft.com> wrote in message
> news:90A8A558-DBB4-455E-A40E-0160BA0AFB42@microsoft.com...
> > OS: Vista Enterprise/Business
> > The IE7 Zone Security Settings are set by editing registry values in
> > HKLM\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\,
> > and
> > Security_HKLM_only is set to 1. When a user, who has local admin rights,
> > logs
> > on for the first time the HKLM\..\Zones\ values for the security zone 2
> > (Trusted Site) and 3 (Internet) get reset to values defined under
> > HKLM\...\TemplatePolicies. This changes only happen for the first logon
> > and
> > when Security_HKLM_only=1. Is there any way to stop this changes from
> > happening?
>
> It might be a security program blocking the Registry change it needs to
> make. A few, but not all, of the programs now doing this are:
> Ad-aware's Ad-Watch
> IBM Access Connections
> McAfee VirusScan and/or Antispyware
> Norton AV
> Spyware Blaster
> Spybot> Tools> IE Tweaks
> Spybot- Teatimer
> Spysweeper
> Spyware Doctor
> Windows Defender
> Zone Alarm (free) 6.5 Reported to be fixed in later versions.
>
> In the case of Zone Alarm 6.5 or Norton 2007 it actually has to be
> uninstalled. Make sure the Windows Firewall is turned on until you
> reinstall Zone Alarm.
>
> Boot into Safe Mode with Networking and try the change.
>
> --
> Frank Saunders, MS-MVP OE/WM
> Do not send mail.
>
>