Remove ZoneMap GPO remains

Question

Hi

I wanted to use Edge with IEMode and intranet site zone mapping.

In a Terminal Server Environment. (Server 2019, Current Edge)

Using the ZoneMap GPO in HKLM or HKCU I could not achive any consistent result. They sometimes wont apply - ESC off. Wasted hours of testing.

Now I wanted to remove all GPOs and edit the ZoneMap keys in the user registry directly.

But I cannot remove the remains of the GPOs in the users registry
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

The user does not have rights to delete the empty keys.

But these keys seem to prevent a user added ZoneMap from saving.

Now I have 2 Options:

1. Delete the profiles and let start users from scratch
2. Some convoluted task that removes the GPO remains

Or are there any other ideas?

thank you

Markus

Answer 1

It seems I found a solution:

• add the ZoneMap Keys under HKLM like this
  [HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\domain.com]
• add both locations WOW6432Node and standard path because iexplore.exe may use a 64 or 32bit tab.
• also in both locations
  [\ZoneMap]
  "IEHarden"=dword:00000000

removed all GPOs regarding ZoneMap.

result: the zones apply to all users on that machine.