The Security tab of the Internet Explorer Properties dialog shows security settings for the Internet, Intranet, Trusted Sites and Restricted Sites zones. However: It doesn’t show settings for the Local Machine (Computer) zone, nor for Local Machine Zone Lockdown (LMZL). When machine settings or other policies are in effect, most of the Security Zones UI is disabled. The attached utility “IE Zone Comparer” was designed to overcome these limitations and provide additional visibility into security zone

Visual Studio 2008 source and project files for the new ImportRegPol utility and the updated Set_FDCC_LGPO and Apply_LGPO_Delta utilities for managing Local Group Policy Objects. Note that these are all now Visual Studio 2008 projects.

A customer requested an addition to the local group policy toolset posted on the FDCC blog . While working on the new utility, I needed to upgrade the other two. The full set is attached to this post, with documentation. The source code for all of them is attached to a separate post . The new utility, ImportRegPol, takes a registry policy file (registry.pol) as input. It can import its contents into the local group policy of the local computer (Computer or User configuration), or simply read it and

Visual Studio 2005 project files and source code for Set_FDCC_LGPO.exe v1.06 is attached to this blog post. [Removed, as a newer version is available -- bookmark the landing page for the most up-to-date-links.]

Set_FDCC_LGPO has been updated to reflect the updated GPO content on NIST's download page . The FDCC settings have not changed. The updates contain only corrections to the downloads to more closely adhere to the FDCC settings. The updated Set_FDCC_LGPO is attached to this blog post. (This time I also remembered to include the readme.htm in the zip file.) The updated Visual C++ project sources are here . To recap: Set_FDCC_LGPO is a non-interactive tool that applies the Q1 2009 FDCC desktop policy

Visual Studio 2005 project and source code files for Apply_LGPO_Delta v1.01 is attached to this blog post. [Attachment removed, as a newer version is available -- bookmark the landing page for the most up-to-date-links.]

Apply_LGPO_Delta is a utility for automating the management of local group policy -- administrative templates and security templates. First posted here , it has been updated with the same fix that was applied to Set_FDCC_LGPO to prevent the 0x80070020 sharing-violation error from occurring. Documentation is in the download. The sample starter files have been updated, including the addition of a security template you can use to revert the file system permissions changes that FDCC mandates on XP. Updated

Visual Studio 2005 project files and source code for Set_FDCC_LGPO.exe v1.05 is attached to this blog post. (This blog doesn't support multiple file attachments per post...) [Attachment removed, as a newer version is available -- bookmark the landing page for the most up-to-date-links.]

[2009-04-15: Attachment removed. Bookmark this page for the latest versions of these utilities.] The utility for applying FDCC configuration settings en masse to a computer has been updated: The 0x80070020 sharing-violation error code that occasionally occurred appears to be due to contention over the registry.pol files between Set_FDCC_LGPO (which is writing to them) and winlogon.exe, which is reading from them to apply their contents to local policy. Upon a sharing-violation error, Set_FDCC_LGPO