' Add FINNAS trusted sites' Matt Rowston Version 2.2 30-06-11 ' This script does the following.... ' ' Adds entries into the registry using the \ slash method ' Adds Security Settings for IE ' ' Microsoft Reference Document - ' Internet Explorer security zones registry entries for advanced users ' http://support.microsoft.com/?kbid=182569 ' Matt Rowston (NAS Insurance) ' it@nasinsurance.com.au ' 'The Zones key contains keys that represent each security zone that is defined for the computer. By default, the following five zones are defined (numbered zero through four): Value Setting ' ------------------------------ ' 0 My Computer ' 1 Local Intranet Zone ' 2 Trusted sites Zone ' 3 Internet Zone ' 4 Restricted Sites Zone ' ' Each of these keys contains the following DWORD values that represent corresponding settings on the custom Security tab. ' ' Note Unless stated otherwise, each DWORD value is equal to zero, one, or three. Typically, a setting of zero sets a specific ' action as permitted, a setting of one causes a prompt to appear, and a setting of three prohibits the specific action. ' ' As discovered on the 30th of June 2011 the above statement from the KB article varies based on the double negatives ' For future settings ensure you check the actual registry setting that is deployed by IE ' '----------------------------------------Start Internet Explorer Progress Window----------------------- Set objShell = WScript.CreateObject("WScript.Shell") Set objExplorer = CreateObject("InternetExplorer.Application") objExplorer.Navigate "about:blank" objExplorer.ToolBar = 0 objExplorer.StatusBar = 0 objExplorer.Width = 800 objExplorer.Height = 600 objExplorer.Left = 20 objExplorer.Top = 20 Do While (objExplorer.Busy) Wscript.Sleep 20 Loop objExplorer.Visible = 1 Set objDocument = objExplorer.Document objDocument.Open objDocument.Writeln "NAS - Internet Explorer FINNAS Settings Script" 'objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objDocument.Writeln "" objExplorer.Document.body.childnodes(0).InnerHTML = "" & _ "NAS - Internet Explorer FINNAS Settings Script.

" wscript.sleep 1000 ' ' ' **** Computers Trusted Sites settings to suit FINNAS **** ' ' ' msgbox "MATT PAUSE",64,"NAS FINNAS Settings" ' ' Using the \ slash method ' Using the \ slash method ' Using the \ slash method ' HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ' '----------------------------------------Say Adding Trusted Sites Using the \ slash method-------------------------------------- objExplorer.Document.body.childnodes(4).InnerHTML="Adding *.nasinsurance.com.au to Trusted Sites...

" ' '----------------------------------------Say Add nasinsurance.com.au to Trusted Sites list------------------------------------- objExplorer.Document.body.childnodes(5).InnerHTML="added........nasinsurance.com.au
" ' Add nasinsurance.com.au to Trusted Sites list HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\" & "ZoneMap\Domains\nasinsurance.com.au" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath strValueName = "*" dwValue = 2 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, strValueName, dwValue ' ' 'Adding Security Settings for IE 'Adding Security Settings for IE 'Adding Security Settings for IE '----------------------------------------Say Adding Internet Explorer Security Settings for Trusted Sites------------------------------------- objExplorer.Document.body.childnodes(6).InnerHTML="
Adding Security Settings for Trusted Sites...
" ' ' objExplorer.Document.body.childnodes(7).InnerHTML="Enable - Download signed ActiveX components from a Web page
" ' Download signed ActiveX components from a Web page (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1001" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(8).InnerHTML="Enable - Download unsigned ActiveX components from a Web page
" ' Download unsigned ActiveX components from a Web page (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1004" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(9).InnerHTML="Enable - Run ActiveX components and plug-ins from Web pages
" ' Run ActiveX components and plug-ins from Web pages (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1200" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(10).InnerHTML="Enable - ActiveX controls and plug-ins: Initialize and script ActiveX controls not marked as safe
" ' Run Enable - ActiveX controls and plug-ins: Initialize and script ActiveX controls not marked as safe (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1201" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(11).InnerHTML="Enable - ActiveX controls and plug-ins: Allow previously unused ActiveX controls to run without prompt
" ' Run Enable - ActiveX controls and plug-ins: Allow previously unused ActiveX controls to run without prompt (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1208" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(12).InnerHTML="Disable - Only allow approved domains to use ActiveX controls without prompt
" ' Run Disable - Only allow approved domains to use ActiveX controls without prompt (Zone 2) ' ActiveX controls and plug-ins: Override Per-Site (domain-based) ActiveX restrictions HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "120B" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(13).InnerHTML="Enable - ActiveX controls and plug-ins: Allow Scriptlets
" ' Run Enable - ActiveX controls and plug-ins: Allow Scriptlets (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1209" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(14).InnerHTML="Enable - Scripting: Active scripting
" ' Enable - Scripting: Active scripting (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1400" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(15).InnerHTML="Enable - Allow scripts to interact with ActiveX components marked safe for scripting
" ' Allow scripts to interact with ActiveX components marked safe for scripting (Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1405" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(16).InnerHTML="Enable - Miscellaneous: Access data sources across domains
" ' Enable - Miscellaneous: Access data sources across domains(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1406" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(17).InnerHTML="Enable - Miscellaneous: Display mixed content
" ' Enable - Miscellaneous: Display mixed content(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1609" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(18).InnerHTML="Enable - Downloads: File Download
" ' Enable - Downloads: File Download(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1803" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(19).InnerHTML="Disable - Miscellaneous: Use Pop-up Blocker
" ' Disable - Miscellaneous: Use Pop-up Blocker(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1809" dwValue = 3 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(20).InnerHTML="Enable - Miscellaneous: Web sites in less privileged web content zone can navigate into this zone
" ' Enable - Miscellaneous: Web sites in less privileged web content zone can navigate into this zone(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "1A00" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(21).InnerHTML="Enable - User Authentication:Logon:Automatically logon with current username and password
" ' User Authentication: Logon : 0x00000000 Automatically logon with current username and password(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "2101" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(22).InnerHTML="Enable - Downloads: Automatic prompting for file downloads
" ' Enable - Downloads: Automatic prompting for file downloads(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "2200" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(23).InnerHTML="Enable - ActiveX controls and plug-ins: Automatic prompting for ActiveX controls
" ' Enable - ActiveX controls and plug-ins: Automatic prompting for ActiveX controls(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "2201" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(24).InnerHTML="Enable - Miscellaneous: Allow web pages to use restricted protocols for active content
" ' Enable - Miscellaneous: Allow web pages to use restricted protocols for active content(Zone 2) HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "2300" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(25).InnerHTML="Enable - Delete Temp Internet Files on Shutdown
" ' Adds Delete Temp Internet Files on Shutdown HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "Persistent" dwValue = 0 objReg.SetDWORDValue HKEY_CURRENT_USER, strKeyPath, ValueName, dwValue ' objExplorer.Document.body.childnodes(26).InnerHTML="Disable - Script Debugging
" ' Adds Disable Script Debugging HKEY_CURRENT_USER = &H80000001 strComputer = "." Set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv") strKeyPath = "Software\Microsoft\Internet Explorer\Main" objReg.CreateKey HKEY_CURRENT_USER, strKeyPath ValueName = "Disable Script Debugger" StringValue = "yes" objReg.SetStringValue HKEY_CURRENT_USER, strKeyPath, ValueName, StringValue ' ' ' ' '----------------------------------------Say completed-------------------------------- objExplorer.Document.body.childnodes(27).InnerHTML="
Trusted Sites Configuration is complete...thankyou
" wscript.sleep 1000 msgbox "Internet Explorer FINNAS Settings Script Completed",64,"NAS FINNAS Settings" objExplorer.quit