You cannot update a custom Web site to the security zone if you log on to a Windows Server 2003-based server by using a remote desktop connection (899270)



The information in this article applies to:

  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Web Edition

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

If you log on to a Microsoft Windows Server 2003-based server, you cannot update the security zone from a Group Policy object (GPO). This symptom occurs if the following conditions are true:
  • You log on to a Windows Server 2003-based server by using a remote desktop connection.
  • The Start the following program on connection option is selected.

RESOLUTION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, follow these steps:
  1. Create an Iegpo.vbs script with the following code.

    Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.
    Option Explicit
    Dim WshShell , objEnv , strCmdLine , strVersion , strLocale
    Set WshShell = WScript.CreateObject("WScript.Shell") 
    Set objEnv = WshShell.Environment("process")
    
        strCmdLine = ObjEnv.Item("SystemRoot") & "\system32\ie4uinit.exe" 
        WScript.Echo strCmdLine 
        WshShell.Run strCmdline , 1, TRUE
     
        strVersion = WshShell.RegRead ("HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version")
        WshShell.RegWrite "HKCU\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version" , strVersion,"REG_SZ"
        strLocale = WshShell.RegRead ("HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale")
        WshShell.RegWrite "HKCU\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale" , strLocale,"REG_SZ"
     
        strCmdLine = "rundll32 iedkcs32.dll,BrandExternal ;*0<" & _ 
                     objEnv.Item("APPDATA") & _ 
                     "\Microsoft\Internet Explorer\Custom Settings"
        WScript.Echo strCmdLine 
        WshShell.Run strCmdline , 1, TRUE
  2. Run the Iegpo.vbs script. To run the Iegpo.vbs script, follow these steps:
    1. Click Start, and then click Run.
    2. In the Open box, type cscript Iegpo.vbs, and then click OK.

MORE INFORMATION

The Iegpo.vbs script performs the following tasks:
  1. The Iegpo.vbs script copies the following registry key from HKEY_LOCAL_MACHINE to HKEY_CURRENT_USER:
    • HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Version
    • HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\Locale
  2. The Iegpo.vbs script runs the following command:

    rundll32 iedkcs32.dll,BrandExternal ;*0<%APPDATA%\Microsoft\Internet Explorer\Custom Settings


Modification Type:MajorLast Reviewed:8/15/2005
Keywords:kbtshoot kbprb KB899270 kbAudEndUser kbAudITPRO