Create an Internet zone rule

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To create an Internet zone rule

  1. Open Software Restriction Policies.

  2. In either the console tree or the details pane, right-click Additional Rules, and then click New Internet Zone Rule.

  3. In Internet zone, click an Internet zone.

  4. In Security level, click either Disallowed or Unrestricted, and then click OK.

Notes

  • Different administrative credentials are required to perform this procedure, depending on your environment:

    • If you create an Internet zone rule for your local computer: To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

    • If you create an Internet zone rule for a computer that is joined to a domain: To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.

  • To open Software Restriction Policies, see "Open Software Restriction Policies" in Related Topics.

  • It may be necessary to create a new software restriction policy setting for the Group Policy object (GPO) if you have not already done so. For information about how to create new software restriction policies, see Related Topics.

  • Zone rules only apply to files with an .msi file type, which are Windows Installer packages.

  • For software restriction policies to take effect, users must update policy settings by logging off from and logging on to their computers.

  • When more than one software restriction policies rule is applied to policy settings, there is a precedence of rules for handling conflicts. For more information see, "Precedence of software restriction policies" in Related Topics.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Open Software Restriction Policies
Create new software restriction policies
Software Restriction Policies
Security levels and additional rules
Windows Installer overview
Precedence of software restriction policies rules