I suggest that you re-read the answer that Frank has posted for your issue.

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"dekac99" <dekac99@discussions.microsoft.com> wrote in message news:73C4FE4E-C8DC-4116-8590-BA113B884D72@microsoft.com...
> The issue is that the settings get changed, not that they cannot be changed.
> We do not want the original custom HKLM registry settings on a client PC to
> change when an admin logon to the Client PC for the first time. Any ideas?
> Thanks.
>
> "Frank Saunders, MS-MVP OE/WM" wrote:
>
>> "dekac99" <dekac99@discussions.microsoft.com> wrote in message
>> news:90A8A558-DBB4-455E-A40E-0160BA0AFB42@microsoft.com...
>> > OS: Vista Enterprise/Business
>> > The IE7 Zone Security Settings are set by editing registry values in
>> > HKLM\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\,
>> > and
>> > Security_HKLM_only is set to 1. When a user, who has local admin rights,
>> > logs
>> > on for the first time the HKLM\..\Zones\ values for the security zone 2
>> > (Trusted Site) and 3 (Internet) get reset to values defined under
>> > HKLM\...\TemplatePolicies. This changes only happen for the first logon
>> > and
>> > when Security_HKLM_only=1. Is there any way to stop this changes from
>> > happening?
>>
>> It might be a security program blocking the Registry change it needs to
>> make. A few, but not all, of the programs now doing this are:
>> Ad-aware's Ad-Watch
>> IBM Access Connections
>> McAfee VirusScan and/or Antispyware
>> Norton AV
>> Spyware Blaster
>> Spybot> Tools> IE Tweaks
>> Spybot- Teatimer
>> Spysweeper
>> Spyware Doctor
>> Windows Defender
>> Zone Alarm (free) 6.5 Reported to be fixed in later versions.
>>
>> In the case of Zone Alarm 6.5 or Norton 2007 it actually has to be
>> uninstalled. Make sure the Windows Firewall is turned on until you
>> reinstall Zone Alarm.
>>
>> Boot into Safe Mode with Networking and try the change.
>>
>> --
>> Frank Saunders, MS-MVP OE/WM
>> Do not send mail.
>>
>>