COMMAND
MS Internet Explorer
SYSTEMS AFFECTED
Win systems (IE 4.x)
PROBLEM
John Schultz found following. IE 4.x does not appear to save some
of the custom security settings you may modify via the View |
Internet Options | Security dialog. If you switch to a different
security level and then back to the Custom level, you will notice
that some settings have not been retained. On testing machine,
disabled were Java, scripting, and ActiveX, in addition to
changing a few other security settings. If you disable these
items in the Custom level, switch to the High level to access some
site that requires a disabled feaure (such as Java), and then
switch back to the Custom level, one would expect Java to be
once-again disabled. All testing was done while set for the
Internet zone.
Here are the security settings John has noticed changing when
switching from the Custom level to the High level, and then back
again. It is believed this list is not inclusive of the settings
that do not "stick" - it's just the settings John noticed during
his testing:
* Script ActiveX controls marked safe for scripting - was disabled
in Custom level, enabled in Custom level after switching to High
level and back to Custom.
* File download - was enabled in Custom level, disabled after the
switch.
* Java permissions - was disabled in Custom level, set to High
safety after the switch.
* Installation of desktop items - was set to Prompt in Custom
level, set to Disable after the switch.
* Active scripting - was set to disable in Custom level, enabled
after the switch.
These changes would occur when changing security level from Custom
to High and either:
1. Closing the Internet Options dialog, reopening the dialog, and
selecting Custom level.
2. Clicking the Apply button without closing the Internet Options
dialog, and selecting the Custom level.
This was tested on IE 4.01 SP1 with all IE security patches
applied. The Help | About dialog displays version 4.72.3110.8
and update versions ;SP1;2922;2958;
SOLUTION
MS don't think it's a problem.