Preventing Users from Changing IE's Security Settings

Q: How can we prevent users from changing the security settings in Microsoft Internet Explorer (IE)? For example, we want to prevent users from lowering the security level of the Internet zone.

A: To stop users from changing the Internet zone's security level, open a Group Policy Object (GPO) linked to the organizational unit (OU) that's applied to the users you want to restrict, and then maneuver to User ConfigurationWindows SettingsInternet Explorer MaintenanceSecurity. Double-click Security Zones and Content Ratings, then click Import the current security zones and privacy settings. Next, click Modify Settings, Default Level, which sets the Internet zone to the Medium security level. Click OK twice to close the dialog boxes and save your changes. Now all the users who receive the policies in this GPO will have IE’s mandated security settings. To prevent users from changing the security level, I recommend enabling the Disable the Security page policy, which you’ll find under User ConfigurationAdministrative TemplatesInternet Control Panel.