Fixlet for Internet Explorer

I’m trying to write a relevance which can Modify/change the security setting of Internet Explorer.

Please help me out!!!

As I recall, most (if not all) settings are configurable through GPO or registry settings. If the idea is you want to read these values (which would depend on whichever user is logged in) then the keys can be located here:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\]

@jmaple Hi jmaple,thanx for the response but I’m looking for the relevance which can change,modify or add site to trusted site.

I’d recommend having a look at this and seeing what solution works best for you:

http://www-01.ibm.com/support/knowledgecenter/SS6MCG_8.2.0/com.ibm.tem.doc_8.2/Platform/Action/c_regset.html

@jmaple thanx jmaple,information was really helpful to me.I have created a fixlet it’s working through fixlet debugger but when I’m deploying it through console,it’s getting 100% completed but nothing is getting change in client side. Can anyone help me regarding this.

parameter “FilePath” = “c:\iechanges.reg"
delete “{parameter “FilePath”}“
createfile until trianz
{“Windows Registry Editor Version 5.00”}
{”[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]”}
{”[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\google.com]"}
{"%22http%22=dword:00000002"}
{"[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yahoo.com]"}
{"%22http%22=dword:00000002"}
trianz
copy __createfile "{parameter “FilePath”}"
runhidden cmd.exe /C regedit /S c:\iechanges.reg

Remember that the IEM Client runs as Local System, so it has no Current_User context of it’s own.

You need to look into the RUNASCURRENTUSER.exe utility.

https://www-304.ibm.com/support/docview.wss?uid=swg21506033

@TimRice brings up a very good point! Just a reminder that v9.x introduces a new actionscript command that makes invoking commands as the current user’ much easier than having to use the runascurrentuser utility (specifically the ‘override’ command as described by Alan):

Agree on applying what you can by GPO. Here’s an example I posted to Bigfix.me for applying settings to Chrome via Local GPO. You should be able to use that, and the source links in the description, to build a fixlet to detect & apply settings via Local GPO.
http://bigfix.me/fixlet/details/3977