[phaolo]

I need a confirmation for these 2 tweaks before adding them to my unattended WinXp SP3 cd.
I am very dubious, are they correct or could they give security or system issues?


1- I can't use activex content in html files saved on my pc\cd unless I do these things:

A- put this line in the html pages: <!-- saved from url=(0015)about:localhost -->

B- Modify these registry keys:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"iexplore.exe"="DWORD:0"
[HKEY_CURRENT_USER\Software\ Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings]
"LOCALMACHINE_CD_UNLOCK"="DWORD:1"

C- add localhost to the "Local Internet" security zone
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost]
"Default"="DWORD:1"


Does another method exist otherwise?


2- is separating iexplorer in various processes good? Can this cause instability or memory issues?

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SeparateProcess"="DWORD:1"

This post has been edited by phaolo: 20 September 2008 - 04:57 PM

[MCT]

Quote

B- Modify these registry keys:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
"iexplore.exe"="DWORD:0"
[HKEY_CURRENT_USER\Software\ Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings]
"LOCALMACHINE_CD_UNLOCK"="DWORD:1"

C- add localhost to the "Local Internet" security zone
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"2201"="DWORD:0"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost]
"Default"="DWORD:1"

id assume this would be safe, its just registry entries, if it doesnt work undo it, test on a virtual machine 1st

Quote

2- is separating iexplorer in various processes good? Can this cause instability or memory issues?

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"SeparateProcess"="DWORD:1"

this is safe, ive used it in the past, worked fine for me when i used it
BUT!!!!! why use IE? so much more flexibility with other browsers , safer aswell

[phaolo]

Hey I'm not worried about the process of writing the registry. I was thinking about the method and content!

1: Is it ok to add localhost to the "Local Internet" security zone or could this cause security breach? Is this strange method the only way to fix the problem?

2: ok then, anyway I have Firefox too




p.s: ops this is about another thing, I'll remove it: Zones\3 "2201"="DWORD:0"

This post has been edited by phaolo: 20 September 2008 - 05:07 PM