Sets IE settings for Siebel CRM

tatoo.bat

@ECHO OFF

REM IE Configuration for INKS (Siebel)
REM december 3rd, 2010 v1

REM Most of this information can be found here http://support.microsoft.com/kb/182569

REM The IE settings are stored in HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones path

REM the folders named 0-4 indicate security zones, they are as follows:
REM 0 = My Computer (local machine)
REM 1 = Local Intranet Zone
REM 2 = Trusted Sites Zone
REM 3 = Internet Zone
REM 4 = Restricted Sites Zone
REM
REM The HKCU path should be set as a custom variable since it will never change

REM Set the magic path, use %regPath% later to access this
REM If on a domain and you have the AD policy enabled for 'use machine settings only then please change the HKCU to HKLM since it will be read from that location instead

SET regPath="HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones"

REM From the MS KB Page: 'Unless stated otherwise, each DWORD value is equal to zero, one, or three. Typically, a setting of zero sets a specific action as permitted, a setting of one causes a prompt to appear, and a setting of three prohibits the specific action.

REM There is a great map showing you what each numbered DWORD settings is on the pag pasted at the top of this script. Please see the text file that should've accompanied this script for a complete listing of commands.

REM First we're going to backup the things we're about to change to C:\IESettings.bak
REM If you need to reimport these, rename this file to IESettings.reg and double click the file and confirm you wish to import/merge the contents of the file with the registry
REG EXPORT %regPath% C:\IESettings.bak

REM Setup var for type of REG_DWORD
SET dw=REG_DWORD
REM First we will work with the Internet Zone (3)
REM 0x0 = Enable
REM 0x1 = Prompt
REM 0x3 = Disable
REM /t is type /f is overwite without prompt

REM Don't prompt for client certificate selection when no certificates or only one certificate exists
REG ADD %regPath%\3 /v 1A04 /t %dw% /d 0x0 /f
REM Display video and animation on a webpage that does not use external media player
REG ADD %regPath%\3 /v 120A /t %dw% /d 0x3 /f
REM Download signed activex controls
REG ADD %regPath%\3 /v 1001 /t %dw% /d 0x1 /f
REM Download unsigned activex controls 
REG ADD %regPath%\3 /v 1004 /t %dw% /d 0x1 /f
REM Run activex controls and plug-ins
REG ADD %regPath%\3 /v 1200 /t %dw% /d 0x0 /f 
REM Initialize and script activex controls not marked as safe for scripting
REG ADD %regPath%\3 /v 1201 /t %dw% /d 0x1 /f 
REM Allow previously unused activex controls to run without prompt
REG ADD %regPath%\3 /v 1208 /t %dw% /d 0x0 /f 
REM Allow scriptlets
REG ADD %regPath%\3 /v 1209 /t %dw% /d 0x1 /f 
REM Allow scripting of Java Applets
REG ADD %regPath%\3 /v 1402 /t %dw% /d 0x0 /f
REM Script activex controls marked safe for scripting
REG ADD %regPath%\3 /v 1405 /t %dw% /d 0x0 /f
REM Access data sources across domains
REG ADD %regPath%\3 /v 1406 /t %dw% /d 0x3 /f
REM Font download
REG ADD %regPath%\3 /v 1604 /t %dw% /d 0x0 /f 
REM Display mixed content
REG ADD %regPath%\3 /v 1609 /t %dw% /d 0x0 /f
REM File download
REG ADD %regPath%\3 /v 1803 /t %dw% /d 0x0 /f 
REM Launch programs and files in an IFRAME
REG ADD %regPath%\3 /v 1804 /t %dw% /d 0x1 /f
REM Binary and script behavoirs
REG ADD %regPath%\3 /v 2000 /t %dw% /d 0x0 /f 
REM Allow script initiated windows without size or position constraints
REG ADD %regPath%\3 /v 2102 /t %dw% /d 0x0 /f
REM Allow status bar updates via script
REG ADD %regPath%\3 /v 2103 /t %dw% /d 0x0 /f
REM Allow websites to open windows without address or status bars
REG ADD %regPath%\3 /v 2104 /t %dw% /d 0x0 /f
REM Allow websites to prompt for information using scripted windows
REG ADD %regPath%\3 /v 2105 /t %dw% /d 0x0 /f
REM Automatic prompting for file downloads
REG ADD %regPath%\3 /v 2200 /t %dw% /d 0x0 /f 
REM Automatic prompting for activex controls
REG ADD %regPath%\3 /v 2201 /t %dw% /d 0x0 /f 

REM Now we will adjust the Intranet Zone (1)
REM Don't prompt for client certificate selection when no certificates or only one certificate exists
REG ADD %regPath%\1 /v 1A04 /t %dw% /d 0x0 /f
REM Display video and animation on a webpage that does not use external media player
REG ADD %regPath%\1 /v 120A /t %dw% /d 0x3 /f
REM Download signed activex controls
REG ADD %regPath%\1 /v 1001 /t %dw% /d 0x1 /f
REM Download unsigned activex controls 
REG ADD %regPath%\1 /v 1004 /t %dw% /d 0x1 /f
REM Run activex controls and plug-ins
REG ADD %regPath%\1 /v 1200 /t %dw% /d 0x0 /f 
REM Initialize and script activex controls not marked as safe for scripting
REG ADD %regPath%\1 /v 1201 /t %dw% /d 0x1 /f 
REM Allow previously unused activex controls to run without prompt
REG ADD %regPath%\1 /v 1208 /t %dw% /d 0x0 /f 
REM Allow scriptlets
REG ADD %regPath%\1 /v 1209 /t %dw% /d 0x1 /f 
REM Allow scripting of java applets
REG ADD %regPath%\1 /v 1402 /t %dw% /d 0x0 /f
REM Script activex controls marked safe for scripting
REG ADD %regPath%\1 /v 1405 /t %dw% /d 0x0 /f 
REM Access data sources across domains
REG ADD %regPath%\1 /v 1406 /t %dw% /d 0x3 /f
REM Font download
REG ADD %regPath%\1 /v 1604 /t %dw% /d 0x0 /f 
REM Display mixed content
REG ADD %regPath%\1 /v 1609 /t %dw% /d 0x0 /f
REM File download
REG ADD %regPath%\1 /v 1803 /t %dw% /d 0x0 /f
REM Launch programs and files in an IFRAME
REG ADD %regPath%\1 /v 1804 /t %dw% /d 0x1 /f
REM Binary and script behavoirs
REG ADD %regPath%\1 /v 2000 /t %dw% /d 0x0 /f 
REM Allow script initiated windows without size or position constraints
REG ADD %regPath%\1 /v 2102 /t %dw% /d 0x0 /f
REM Allow status bar updates via script
REG ADD %regPath%\1 /v 2103 /t %dw% /d 0x0 /f
REM Allow websites to open windows without address or status bars
REG ADD %regPath%\1 /v 2104 /t %dw% /d 0x0 /f
REM Allow websites to prompt for information using scripted windows
REG ADD %regPath%\1 /v 2105 /t %dw% /d 0x0 /f
REM Automatic prompting for file downloads
REG ADD %regPath%\1 /v 2200 /t %dw% /d 0x0 /f 
REM Automatic prompting for activex controls
REG ADD %regPath%\1 /v 2201 /t %dw% /d 0x0 /f 

REM Finally we will adjust the Trusted Sites Zone (2)
REM Don't prompt for client certificate selection when no certificates or only one certificate exists
REG ADD %regPath%\2 /v 1A04 /t %dw% /d 0x0 /f
REM Display video and animation on a webpage that does not use external media player
REG ADD %regPath%\2 /v 120A /t %dw% /d 0x3 /f
REM Download signed activex controls
REG ADD %regPath%\2 /v 1001 /t %dw% /d 0x1 /f
REM Download unsigned activex controls 
REG ADD %regPath%\2 /v 1004 /t %dw% /d 0x1 /f
REM Run activex controls and plug-ins
REG ADD %regPath%\2 /v 1200 /t %dw% /d 0x0 /f 
REM Initialize and script activex controls not marked as safe for scripting
REG ADD %regPath%\2 /v 1201 /t %dw% /d 0x1 /f 
REM Allow previously unused activex controls to run without prompt
REG ADD %regPath%\2 /v 1208 /t %dw% /d 0x0 /f 
REM Allow scriptlets
REG ADD %regPath%\2 /v 1209 /t %dw% /d 0x1 /f 
REM Allow scripting of java applets
REG ADD %regPath%\2 /v 1402 /t %dw% /d 0x0 /f
REM Script activex controls marked safe for scripting
REG ADD %regPath%\2 /v 1405 /t %dw% /d 0x0 /f 
REM Access data sources across domains
REG ADD %regPath%\2 /v 1406 /t %dw% /d 0x3 /f
REM Font download
REG ADD %regPath%\2 /v 1604 /t %dw% /d 0x0 /f 
REM Display mixed content
REG ADD %regPath%\2 /v 1609 /t %dw% /d 0x0 /f
REM File download
REG ADD %regPath%\2 /v 1803 /t %dw% /d 0x0 /f
REM Launch programs and files in an IFRAME
REG ADD %regPath%\2 /v 1804 /t %dw% /d 0x1 /f
REM Binary and script behavoirs
REG ADD %regPath%\2 /v 2000 /t %dw% /d 0x0 /f 
REM Allow script initiated windows without size or position constraints
REG ADD %regPath%\2 /v 2102 /t %dw% /d 0x0 /f
REM Allow status bar updates via script
REG ADD %regPath%\2 /v 2103 /t %dw% /d 0x0 /f
REM Allow websites to open windows without address or status bars
REG ADD %regPath%\2 /v 2104 /t %dw% /d 0x0 /f
REM Allow websites to prompt for information using scripted windows
REG ADD %regPath%\2 /v 2105 /t %dw% /d 0x0 /f
REM Automatic prompting for file downloads
REG ADD %regPath%\2 /v 2200 /t %dw% /d 0x0 /f 
REM Automatic prompting for activex controls
REG ADD %regPath%\2 /v 2201 /t %dw% /d 0x0 /f 

REM Now that we've changed the security settings we will change the settings on the advanced tab

SET regPath2="HKCU\Software\Microsoft\Internet Explorer\Main"
SET regPath3="HKLM\Software\Microsoft\Internet Explorer\MAIN"
SET regPath4="HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings"
SET str=REG_SZ

REM Turn off automatic checking for updates
REM 0x1 = Checked in UI
REM 0x0 = Unchecked in UI
REG ADD %regPath2% /v NoUpdateCheck /t %dw% /d 0x1 /f
REM Disable script debugger(other)
REG ADD %regPath2% /v "Disable Script Debugger" /t %str% /d yes /f
REM Disable script debugger(IE)
REG ADD %regPath2% /v DisableScriptDebuggerIE /t %str% /d yes /f
REM Enable browser extensions
REG ADD %regPath2% /v "Enable Browser Extensions" /t %str% /d no /f
REM Reuse windows for launching shortcuts
REG ADD %regPath2% /v AllowWindowReuse /t %dw% /d 0x1 /f
REM Turn off friendly HTTP error messages
REG ADD %regPath2% /v "Friendly http errors" /t %str% /d no /f
REM Empty temporary internet files folder on exit
REG ADD %regPath3% /v "Delete_Temp_Files_On_Exit" /t %str% /d no /f
REM Use HTTP 1.1
REG ADD %regPath4% /v EnableHttp1_1 /t %dw% /d 0x1 /f
REM Use Proxy HTTTP 1.1
REG ADD %regPath4% /v ProxyHttp1.1 /t %dw% /d 0x1 /f

ECHO Finished!
pause