JSI Tip 4489. Group Policy Editor Security Zone setting changes do NOT appear on Windows 2000 Clients?

If you use the Group Policy Editor, gpedit.msc, to modify the Security Zone settings at
Computer Configuration / Administrative Templates / Windows Components / Internet Explorer, the settings may not apply to Windows 2000 clients? The Seczones.inf file in the SYSVOL may not be updated?

If the computer that is running gpedit.msc has the Security_HKLM_only value name set to 1 at
HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsCurrentVersionInternet Settings, this problem will occur.

To resolved this behavior, use one of the following on the computer that runs gpedit.msc:

- Run gpedit.msc at navigate to Computer Configuration / Administrative Templates / Windows Components / Internet Explorer. Disable the Use Only machine settings GPO.

- Use the Registry Editor to navigate to HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsCurrentVersionInternet Settings and delete the Security_HKLM_only Value Name.