Policy

Process List

Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, and so on). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone. Local Machine zone security applies to all local files and content. This feature helps to mitigate attacks where the Local Machine zone is used as an attack vector to load malicious HTML code. If you enable this policy setting and enter a value of 1, Local Machine Zone security applies. If you enter a value of 0, Local Machine Zone security does not apply. If a Value Name is empty or the Value is not 0 or 1, the policy setting is ignored. Do not enter the Internet Explorer processes in this list: use the related Internet Explorer Processes policy to enable or disable IE processes. If the All Processes policy setting is enabled, the processes configured in this box take precedence over that setting. If you disable or do not configure this policy setting, the security feature is allowed.

Policy
Pack Microsoft Windows
Category Windows Components / Internet Explorer / Security Features / Local Machine Zone Lockdown Security
Policy ID c1595e40ee2c
Internal name IESF_PolicyProcessList_4

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN (enabled) = 1
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN (disabled) = 0
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN (enabled) = 1
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN (disabled) = 0
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN

Policy notes

Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Internet, Intranet, Local Machine zone, and so on). Web pages on the local computer have the fewest security restrictions and reside in the Local Machine zone. Local Machine zone security applies to all local files and content. This feature helps to mitigate attacks where the Local Machine zone is used as an attack vector to load malicious HTML code. If you enable this policy setting and enter a value of 1, Local Machine Zone security applies. If you enter a value of 0, Local Machine Zone security does not apply. If a Value Name is empty or the Value is not 0 or 1, the policy setting is ignored. Do not enter the Internet Explorer processes in this list: use the related Internet Explorer Processes policy to enable or disable IE processes. If the All Processes policy setting is enabled, the processes configured in this box take precedence over that setting. If you disable or do not configure this policy setting, the security feature is allowed.

Related policies