The issue is somehow related to the CurrentLevel value for the zone that get
changed from to the non zero value. I have know idea why this value get
changed only when an admin user who does not have a local profile logs on for
the first time.

Thanks for all your help.

"Peter Foldes" wrote:

> I suggest that you re-read the answer that Frank has posted for your issue.
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
>
> "dekac99" <dekac99@discussions.microsoft.com> wrote in message news:73C4FE4E-C8DC-4116-8590-BA113B884D72@microsoft.com...
> > The issue is that the settings get changed, not that they cannot be changed.
> > We do not want the original custom HKLM registry settings on a client PC to
> > change when an admin logon to the Client PC for the first time. Any ideas?
> > Thanks.
> >
> > "Frank Saunders, MS-MVP OE/WM" wrote:
> >
> >> "dekac99" <dekac99@discussions.microsoft.com> wrote in message
> >> news:90A8A558-DBB4-455E-A40E-0160BA0AFB42@microsoft.com...
> >> > OS: Vista Enterprise/Business
> >> > The IE7 Zone Security Settings are set by editing registry values in
> >> > HKLM\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\,
> >> > and
> >> > Security_HKLM_only is set to 1. When a user, who has local admin rights,
> >> > logs
> >> > on for the first time the HKLM\..\Zones\ values for the security zone 2
> >> > (Trusted Site) and 3 (Internet) get reset to values defined under
> >> > HKLM\...\TemplatePolicies. This changes only happen for the first logon
> >> > and
> >> > when Security_HKLM_only=1. Is there any way to stop this changes from
> >> > happening?
> >>
> >> It might be a security program blocking the Registry change it needs to
> >> make. A few, but not all, of the programs now doing this are:
> >> Ad-aware's Ad-Watch
> >> IBM Access Connections
> >> McAfee VirusScan and/or Antispyware
> >> Norton AV
> >> Spyware Blaster
> >> Spybot> Tools> IE Tweaks
> >> Spybot- Teatimer
> >> Spysweeper
> >> Spyware Doctor
> >> Windows Defender
> >> Zone Alarm (free) 6.5 Reported to be fixed in later versions.
> >>
> >> In the case of Zone Alarm 6.5 or Norton 2007 it actually has to be
> >> uninstalled. Make sure the Windows Firewall is turned on until you
> >> reinstall Zone Alarm.
> >>
> >> Boot into Safe Mode with Networking and try the change.
> >>
> >> --
> >> Frank Saunders, MS-MVP OE/WM
> >> Do not send mail.
> >>
> >>
>