Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to change Internet Explorer security settings using a .bat or .vbs file?

Basically, I need to change IE7 and IE8 security settings for the local intranet. The settings I want to change are:

Display video and animation on a webpage that does not use external media player
Doanload signed ActiveX controls
Download unsighned ActiveX controls
Initialize and script ActiveX controls not marked as safe for scripting

These should be set to Enable

I don't know how to use Group Policies but we have network software which allows me to specify the location of a .bat/vbs file and run it on all computers in the network.

share|improve this question

You could accomplish this using registry hacks in your batch files, but GPO would be the appropriate and best way to go. With a GPO, you can control the the settings from being changed back by a user or rougue website. GPOs will apply every hour and 1/2 or so in most environments, whereas your scripts (I'm guessing) are more manual in nature.

Here's a good MSKB on the registry keys you can look at:

another KB for writing the batch files:

share|improve this answer

Yes, you can edit the registry with a batch file. For example:

@echo off
@echo Windows Registry Editor Version 5.00>CoreDB.reg
@echo "%COREDB%"="SQL Server">>CoreDB.reg
@echo "Driver"="%SYSTEMDRIVE%\\WINDOWS\\system32\\sqlsrv32.dll">>CoreDB.reg
@echo "Server"="%COMPUTERNAME%%INSTANCE%">>CoreDB.reg
@echo "Database"="%COREDB%">>CoreDB.reg
@echo "Trusted_Connection"="Yes">>CoreDB.reg

@echo "%COREDB%"="SQL Server">>CoreDB.reg
@echo "Driver"="%SYSTEMDRIVE%\\WINDOWS\\system32\\sqlsrv32.dll">>CoreDB.reg
@echo "Server"="%COMPUTERNAME%INSTANCE%">>CoreDB.reg
@echo "Database"="%COREDB%">>CoreDB.reg
@echo "Trusted_Connection"="Yes">>CoreDB.reg

regedit /s CoreDB.reg
share|improve this answer
You should check out the reg.exe command. It can manipulate the registry directly without the need to create an intermediate .REG file. – jscott Sep 28 '11 at 0:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.