::2 受信任的站点区域
::::--ActiveX 控件自动提示 -禁用
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "2201" /t reg_dword /d 0x00000003 /f
::::--对未标记为可安全执行脚本的ActiveX控件初始化并执行脚本 -启用
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "1201" /t reg_dword /d 0x00000000 /f
::::--下载未签名的ActiveX控件 -提示
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "1004" /t reg_dword /d 0x00000000 /f
::::--将文件上载到服务器时包含本地目录路径 -启用
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "160A" /t reg_dword /d 0x00000000 /f
::::--添加受信任的站点IP
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range10" /v ":Range" /t REG_SZ /d 218.28.28.186 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range10" /v "http" /t REG_DWORD /d 2 /f
::3 Internet 区域
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "2201" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1201" /t reg_dword /d 0x00000001 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1004" /t reg_dword /d 0x00000001 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "160A" /t reg_dword /d 0x00000000 /f
::4 高级
:: ::安全—允许运行或安装软件，即使签名无效 -勾选
REG add " HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download" /v "RunInvalidSignatures" /t reg_dword /d 0x00000001 /f
:: ::安全—允许来自CD的活动内容在“我的电脑”中运行* -勾选
REG add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings" /v "LOCALMACHINE_CD_UNLOCK" /t reg_dword /d 0x00000001 /f
:: ::安全—允许活动内容在“我的电脑”的文件中运行* -勾选
REG add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" /v "iexplore.exe" /t reg_dword /d 0x00000000 /f
禁用以上设置
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "2201" /t reg_dword /d 0x00000000 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "1201" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "1004" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "160A" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "2201" /t reg_dword /d 0x00000000 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1201" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1004" /t reg_dword /d 0x00000003 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "160A" /t reg_dword /d 0x00000003 /f
REG add " HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download" /v "RunInvalidSignatures" /t reg_dword /d 0x00000000 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings" /v "LOCALMACHINE_CD_UNLOCK" /t reg_dword /d 0x00000000 /f
REG add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN" /v "iexplore.exe" /t reg_dword /d 0x00000001 /f
导出注册表reg方式（.reg格式文件）
Windows Registry Editor Version 5.00
::2 受信任的站点区域
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
::::--ActiveX 控件自动提示 -禁用
"2201"=dword:00000003
::::--对未标记为可安全执行脚本的ActiveX控件初始化并执行脚本 -启用
"1201"=dword:00000000
::::--下载未签名的ActiveX控件 -提示
"1004"=dword:00000000
::::--将文件上载到服务器时包含本地目录路径 -启用
"160A"=dword:00000000
::::--添加受信任的站点IP
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range10]
":Range"="218.28.28.186"
"http"=dword:00000002
::3 Internet 区域
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"2201"=dword:00000000
"1201"=dword:00000003
"1004"=dword:00000003
"160A"=dword:00000003
::4 高级
::[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download]
:: ::安全—允许运行或安装软件，即使签名无效 -勾选
::"RunInvalidSignatures"=dword:00000001
:: ::安全—允许活动内容在“我的电脑”的文件中运行* -勾选
::[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]
::"iexplore.exe"=dword:00000000
:: ::安全—允许来自CD的活动内容在“我的电脑”中运行* -勾选
::[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings]
::"LOCALMACHINE_CD_UNLOCK"=dword:00000001