antonsen.net

WARNING:

The solution to this problem requires you to edit the registry,
always make backup before implementing,
and if you do not know what you’re doing, don’t do it !

If you’re having problems setting IE security zone sites via GPO, this registry key may be the cause:
“HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains”

I’ve found that if anything is registered under this key, whatever you set in GPO will not be applied.

Solution: Delete the “Domains” key and all subkeys with the following vb script

On Error Resume Next

Const HKEY_CURRENT_USER = &H80000001

strComputer = “.”
strKeyPath = “Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains”

Set objRegistry = GetObject(“winmgmts:\\” & _
strComputer & “\root\default:StdRegProv”)

DeleteSubkeys HKEY_CURRENT_USER, strKeypath

Sub DeleteSubkeys(HKEY_CURRENT_USER, strKeyPath)
objRegistry.EnumKey HKEY_CURRENT_USER, strKeyPath, arrSubkeys

If IsArray(arrSubkeys) Then
For Each strSubkey In arrSubkeys
DeleteSubkeys HKEY_CURRENT_USER, strKeyPath & “\” & strSubkey
Next
End If

objRegistry.DeleteKey HKEY_CURRENT_USER, strKeyPath
End Sub

Thanks to The Microsoft Scripting Guys for example script