JSI Tip 7743. How do I enable the Windows XP Internet Explorer Custom security dialog to offer the 'Launch Applications and Unsafe Files' choices like Windows Server 2003?

Internet Explorer in Windows XP does NOT offer a GUI Security setting to change the defaults for Launch Applications and Unsafe Files in each of the Security zones.

NOTE: See How can I manage Internet Explorer Security Zones via the registry?

To add the Launch Applications and Unsafe Files settings to the Miscellaneous section of the Custom Security dialog:

1. Copy /Paste the following to a LAAUF.REG file:

Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOMISCSHELLEXEC]"Type"="group""Text"="Launching applications and unsafe files""Bitmap"="C:\WINDOWS\System32\inetcpl.cpl,4443"[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOMISCSHELLEXECALLOW]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Enable""PlugUIText"="@inetcplc.dll,-4803""ValueName"="1806""CheckedValue"=dword:00000000"DefaultValue"=dword:00000003[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOMISCSHELLEXECDENY]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Disable""PlugUIText"="@inetcplc.dll,-4805""ValueName"="1806""CheckedValue"=dword:00000003"DefaultValue"=dword:00000003[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOMISCSHELLEXECQUERY]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Prompt""PlugUIText"="@inetcplc.dll,-4804""ValueName"="1806""CheckedValue"=dword:00000001"DefaultValue"=dword:00000003[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOIEAKMISCSHELLEXEC]"Type"="group""Text"="Launching applications and unsafe files""Bitmap"="C:\WINDOWS\System32\inetcpl.cpl,4443"[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOIEAKMISCSHELLEXECALLOW]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Enable""PlugUIText"="@inetcplc.dll,-4803""ValueName"="1806""CheckedValue"=dword:00000000"DefaultValue"=dword:00000003[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOIEAKMISCSHELLEXECDENY]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Disable""PlugUIText"="@inetcplc.dll,-4805""ValueName"="1806""CheckedValue"=dword:00000003"DefaultValue"=dword:00000003[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsSOIEAKMISCSHELLEXECQUERY]"Type"="radio""RegPath"="SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%s""Text"="Prompt""PlugUIText"="@inetcplc.dll,-4804""ValueName"="1806""CheckedValue"=dword:00000001"DefaultValue"=dword:00000003

2. Merge the LAAUF.REG file with your registry, or run regedit /s LAAUF.REG.

NOTE: To alter the Launch Applications and Unsafe Files setting for a Security Zone:

01. Open Internet Explorer.

02. On the Tools menu, press Internet Options.

03. Select the Security tab.

04. Select one of the Security Zone icons.

05. Press Custom Level.

06. Locate the Launch Applications and Unsafe Files setting in the Miscellaneous section.

07. Choose between Disable, Enable, and Prompt.

08. Press OK.

09. Respond Yes to the Are you sure ....? message.

10. Press OK.