• Hkcu Software Microsoft Internet Explorer
• Hkey Current User Control Panel
• Hkey Current User Fix

[Updated 15 May 2012 to correct a bug involving precedence of Computer policies over User policies.]

Meta Discuss the workings and policies of this site. You can find HKEYCURRENTUSER Control Panel Desktop in HKEYCURRENTUSER Control Panel which you can find in HKEYCURRENTUSER. WINDOWS regedit.exe and the file should be listed. If you see instead. Directory of C: WINDOWS. Windows - Folder Options missing from Windows Explorer Following a virus infection, you can no longer access the Folder options from Windows Explorer. Here's how to correct this issue: Method 1. Click on Start Run; Type the following command and press Enter: gpedit.msc.

I recently worked with some customers who wanted to enumerate which web sites had been assigned to which Internet Explorer security zones. I.e., they wanted to know which web sites had been assigned to the Intranet zone, which to Trusted Sites, etc. In the course of this work I uncovered some surprising complexities about site-to-zone assignment rules that had not yet been documented. This blog post describes those discoveries. Later today I will post an updated version of IEZoneAnalyzer that lists the sites that have been configured and whether those settings are in effect or ignored. [Update: it's been posted.]

[I'm not happy with the way the blog software has reformatted this document; rather than spend the day fighting it I'm attaching the original Word doc to this post.]

Internet Explorer applies a set of rules to associate web sites (URLs) with security zones, based on criteria such as whether the server has a dot in its name. In addition, group policies, computer settings and user preferences can be used to map specific URLs to specific zones. For example, you could explicitly add “https://www.contoso.com” to the Trusted Sites zone. Such site-to-zone mappings are defined under one or more ZoneMap key hierarchies in the registry. There are five different locations where ZoneMap key hierarchies can be defined, but only one or two of them will be in effect at any particular point in time. Exactly which settings under which ZoneMap keys are effective depends on a number of circumstances:

·Whether Site-To-Zone-Assignment lists are configured in Computer Configuration and/or User Configuration group policies;

·Whether the “Security Zones: Use only machine settings” group policy is configured (a.k.a., Security_HKLM_only);

·Whether Internet Explorer’s Enhanced Security Configuration (ESC) is enabled (Server only);

and, quite surprisingly:

·Whether or not the program is a 32-bit process on 64-bit Windows; a.k.a., “Windows On Windows 64” or WOW64.

Yes, that’s right – in some circumstances, a 32-bit process and a 64-bit process on the same computer can see the same site mapped to different security zones.

Also, my testing indicates that there is a bug that results in all URLs being treated as “Internet” zone when both ESC and a Computer or User Site-To-Zone-Assignment list are enabled.

The rules for selecting ZoneMap keys are listed below. Each table shows some combination of the four circumstances described in the overview; following each table is the key or keys that are in effect in those circumstances. There are separate settings under each ZoneMap key for “ESC on” and “ESC off”. If ESC is on, only those settings under the EscDomains and EscRanges subkeys are used; if ESC is off, only the settings under the Domains and Ranges subkeys are used.

Note that in the tables below, WOW64 set to “Yes” means a 32-bit process on a 64-bit version of Windows. WOW64 set to “No” means either a 32-bit process on a 32-bit version of Windows or a 64-bit process on a 64-bit version of Windows.

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Yes	Cleared	Absent	Absent

Combines results from

HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

User preferences (in HKCU) take precedence over computer preferences

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
No	Cleared	Absent	Absent

Combines results from

HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

User preferences (in HKCU) take precedence over computer preferences

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Yes	Set	Absent	Either

HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

User site-to-zone assignments are ignored if present

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
No	Set	Absent	Either

HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

User site-to-zone assignments are ignored if present

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Either	Either	Present	Absent

HKLMSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Either	Cleared	Present	Present

Combines results from

HKLMSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

Computer policies (in HKLM) take precedence over User policies

Hkcu Software Microsoft Internet Explorer

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Either	Set	Present	Either

HKLMSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

User site-to-zone assignments are ignored if present

WOW64	Security_HKLM_only	Computer Site-To-Zone	User Site-To-Zone
Either	Cleared	Absent	Present

HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMap

IT administrators trying to apply site-to-zone settings by directly manipulating registry values often discover two “ZoneMapKey” registry keys that appear to be more interesting than they actually are: specifically, HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMapKey and HKLMSOFTWAREPoliciesMicrosoftWindowsCurrentVersionInternet SettingsZoneMapKey. Values under these keys look like the site-to-zone assignments applied through group policy, and in fact they are. However, these keys are not used directly by Internet Explorer, and if you directly set values there, they will have no effect. The ZoneMapKey entries are just a temporary writing place for the Group Policy engine, which writes entries there as specified by Group Policy, and then parses them into corresponding ZoneMap subkey settings that are used by Internet Explorer.

Where can i find HKEY_CURRENT_USERControl PanelDesktop?

akira

Hkey Current User Control Panel

closed as too localized by Mokubai♦, Renan, Diogo, user3463, Canadian LukeAug 7 '12 at 8:02

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers

Go to Start > Run > type ' regedit' > Enter > then browse to that key.

Hkey Current User Fix

BibhasBibhas

Start > Run > cmd.exe

then in the Command Prompt, type:

and the file should be listed.

If you see instead

Directory of C:WINDOWS

File Not Found

Then something very strange has happened.

But you can also try regedt32 in C:WINDOWSsystem32regedt32.exe

If regedit.exe is where it should be, then Windows can't find it because C:WINDOWS isn't in the path.
In a Command Prompt, enter echo %PATH%
Rr you can use the GUI: Start > Control Panel > System, click on the [Advanced] tab, and click the Environment Variables button.

In that poky little dialog, in the System Variables section is an entry for Path. Double-click on the 'Path' entry, and there's an even tinier (and barely usable) dialog in which you're expected to be able to inspect and edit the semicolon-separated list of directories.

Scroll along the text field looking for entries like C:WINDOWS and C:WINDOWSsystem32
I suspect they won't be there, in which case you'll need to add them:

Insert into the text field:

ensuring that the entries are separated by a semi-colon.

njdnjd

In the registry editor:

Start -> run -> regedit -> Click OK

tcvtcv

Not the answer you're looking for? Browse other questions tagged windowswindows-registry or ask your own question.