I am writting a .reg file to change some security Internet Settings to our users.
As we do not control our AD servers, I cannot try to set it for every user through policy. Yet, I can ask for automatic installations of our patches.
In the past, similar request have been dealt by writing a .bat in the startup folder so, everytime an user logs in, it runs and sets the keys in his HKCU/Software/Microsoft/Windows/Internet Settings branch.
Yet, I was wondering that if I did setup it at HKLM/Software/Microsoft/Windows/Internet Settings, which values would be used: the ones at HKCU? or at HCLM? the most restrictive of both?
So far, the most informative page I have found has been this http://support.microsoft.com/kb/182569/en-us that explains that you can force to use only HKLM settings trhough Group policies, but that is not exactly what I want.