Are /any/ of the applications Frank listed installed?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org

dekac99 wrote:
> The issue is that the settings get changed, not that they cannot be
> changed.
> We do not want the original custom HKLM registry settings on a client PC
> to
> change when an admin logon to the Client PC for the first time. Any ideas?
> Thanks.
>
> "Frank Saunders, MS-MVP OE/WM" wrote:
>
>> "dekac99" <dekac99@discussions.microsoft.com> wrote in message
>> news:90A8A558-DBB4-455E-A40E-0160BA0AFB42@microsoft.com...
>>> OS: Vista Enterprise/Business
>>> The IE7 Zone Security Settings are set by editing registry values in
>>> HKLM\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\,
>>> and
>>> Security_HKLM_only is set to 1. When a user, who has local admin rights,
>>> logs
>>> on for the first time the HKLM\..\Zones\ values for the security zone 2
>>> (Trusted Site) and 3 (Internet) get reset to values defined under
>>> HKLM\...\TemplatePolicies. This changes only happen for the first logon
>>> and
>>> when Security_HKLM_only=1. Is there any way to stop this changes from
>>> happening?
>>
>> It might be a security program blocking the Registry change it needs to
>> make. A few, but not all, of the programs now doing this are:
>> Ad-aware's Ad-Watch
>> IBM Access Connections
>> McAfee VirusScan and/or Antispyware
>> Norton AV
>> Spyware Blaster
>> Spybot> Tools> IE Tweaks
>> Spybot- Teatimer
>> Spysweeper
>> Spyware Doctor
>> Windows Defender
>> Zone Alarm (free) 6.5 Reported to be fixed in later versions.
>>
>> In the case of Zone Alarm 6.5 or Norton 2007 it actually has to be
>> uninstalled. Make sure the Windows Firewall is turned on until you
>> reinstall Zone Alarm.
>>
>> Boot into Safe Mode with Networking and try the change.
>>
>> --
>> Frank Saunders, MS-MVP OE/WM
>> Do not send mail.