【问题标题】:IE Browser - Powershell script to add site to trusted sites list, disable protected mode & make all zones security level lowIE 浏览器 - Powershell 脚本将站点添加到受信任站点列表、禁用保护模式并降低所有区域的安全级别
【发布时间】:2019-01-14 03:29:21
【问题描述】:

为了让我们的网站运行,我们需要:

  1. 将站点添加到受信任站点列表 [已解决]
  2. 禁用 IE 保护模式 [已解决]
  3. 降低所有区域的安全级别。 [面临问题]

我正在自动化这个网站。作为先决条件,我必须注意安全功能。

我已经创建了下面的代码。但我无法将安全级别设置为零。我在区域中找不到 1A10。

我也在添加已解决的问题代码。希望它可以帮助有需要的人

有用的网站 -

https://x86x64.wordpress.com/2014/05/20/powershell-ie-zones-protected-mode-state/ https://support.microsoft.com/en-in/help/182569/internet-explorer-security-zones-registry-entries-for-advanced-users https://blogs.technet.microsoft.com/heyscriptingguy/2015/04/02/update-or-add-registry-key-value-with-powershell/

#1. Add site to trusted sites

#Setting IExplorer settings
Write-Verbose "Now configuring IE"

#Navigate to the domains folder in the registry
set-location "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings"
set-location ZoneMap\Domains

#Create a new folder with the website name
new-item testsite.site.com/ -Force #website part without https
set-location testsite.site.com/
new-itemproperty . -Name https -Value 2 -Type DWORD -Force

Write-Host "Site added Successfully"
Start-Sleep -s 2

# 2. Disable IE protected mode

# Disabling protected mode and making level 0

#Zone 0 – My Computer
#Zone 1 – Local Intranet Zone
#Zone 2 – Trusted sites Zone
#Zone 3 – Internet Zone
#Zone 4 – Restricted Sites Zone

#“2500” is the value name representing “Protected Mode” tick. 3 means Disabled, 0 – Enabled

#Disable protected mode for all zones
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" -Name 2500 -Value "3"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 2500 -Value "3"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" -Name 2500 -Value "3"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" -Name 2500 -Value "3"

Write-Host "IE protection mode turned Off successfully"
Start-Sleep -s 2

# 3. Bring down security level for all zones

#Set Level 0 for low 
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" -Name 1A10 -Value "0"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 1A10 -Value "0"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" -Name 1A10 -Value "0"
Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" -Name 1A10 -Value "0"

Stop-Process -name explorer

提前谢谢大家!!

【问题讨论】:

  • 我想知道组策略管理模板是否具有所有必要的设置?
  • @vonPryz - 感谢您的回复和时间。让我检查一下。

标签: powershell internet-explorer registry


【解决方案1】:

只需删除“0”并替换为对我有用的 0。

Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 1A10 -Value 0

【讨论】:

    猜你喜欢
    • 2023-03-25
    • 2011-08-28
    • 1970-01-01
    • 1970-01-01
    • 2021-07-05
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    相关资源
    最近更新 更多