Disabling Unsigned Applets Appears to Disable Signed Applets (305830)

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

CAUSE

This behavior can occur because to fix a security vulnerability, it is necessary to give unsigned applets the right to connect to the originating server for any code to run, as before the cab or class file has been downloaded, it is not known what permissions the applet will have. The security vulnerability is described in the following Microsoft Knowledge Base article:

253562 FIX: Untrusted Code Can Access Files on End-User Systems

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To alter this behavior, use either of the following methods.

To Allow All Unsigned Applets

On the Tools menu in Internet Explorer, click Internet Options.
Click the Security tab.
Click Custom Level.
Under Java Permissions, click Custom, click Java Custom Settings, and then click Edit Permissions.
Set "Run Unsigned Content" to Run in Sandbox or Enable, and then click OK until all open dialog boxes are closed.

To Allow Unsigned Applets Only the Right to Connect Back to the Originating Server

Close all browser windows.
Run Regedit.exe on the Zonedon.reg file in the System32 folder to turn on the advanced Java zone settings editor.
On the Tools menu in Internet Explorer, click Internet Options.
Click the Security tab.
Click Custom Level.
Under Java Permissions, click Custom, click Java Custom Settings, and then click Advanced Edit.
Under Unsigned Permission, click Edit.
Go through all of the tabs and disable everything except the non-file URL connect access option on the Network tab and (if you need to run applets from file: URL pages) the access to file URL codebase option on the File tab.
Save your changes, and then close all of the dialog boxes.

NOTE: It is also possible to make the preceding changes by using the Cprmedit.exe tool in the Microsoft Java Software Development Kit.