代码之家  ›  专栏  ›  技术社区  ›  KR Akhil

IE浏览器-用于将站点添加到受信任站点列表的Powershell脚本,禁用保护模式并使所有区域的安全级别较低

  •  2
  • KR Akhil  · 技术社区  · 6 年前

    为了使我们的网站运行,我们需要:

    1. 将站点添加到受信任的站点列表[已解决]
    2. 禁用IE保护模式[已解决]
    3. 降低所有区域的安全级别。[面临的问题]

    我正在自动化这个网站。作为先决条件,我必须注意安全功能。

    我已经创建了下面的代码。但我无法将安全级别设置为零。我在区域内找不到1A10。

    My Registry

    我也添加了解决问题的代码。希望它能帮助需要帮助的人

    有用的网站 -

    https://x86x64.wordpress.com/2014/05/20/powershell-ie-zones-protected-mode-state/ https://support.microsoft.com/en-in/help/182569/internet-explorer-security-zones-registry-entries-for-advanced-users https://blogs.technet.microsoft.com/heyscriptingguy/2015/04/02/update-or-add-registry-key-value-with-powershell/

    #1. Add site to trusted sites
    
    #Setting IExplorer settings
    Write-Verbose "Now configuring IE"
    
    #Navigate to the domains folder in the registry
    set-location "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings"
    set-location ZoneMap\Domains
    
    #Create a new folder with the website name
    new-item testsite.site.com/ -Force #website part without https
    set-location testsite.site.com/
    new-itemproperty . -Name https -Value 2 -Type DWORD -Force
    
    Write-Host "Site added Successfully"
    Start-Sleep -s 2
    
    # 2. Disable IE protected mode
    
    # Disabling protected mode and making level 0
    
    #Zone 0 – My Computer
    #Zone 1 – Local Intranet Zone
    #Zone 2 – Trusted sites Zone
    #Zone 3 – Internet Zone
    #Zone 4 – Restricted Sites Zone
    
    #“2500” is the value name representing “Protected Mode” tick. 3 means Disabled, 0 – Enabled
    
    #Disable protected mode for all zones
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" -Name 2500 -Value "3"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 2500 -Value "3"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" -Name 2500 -Value "3"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" -Name 2500 -Value "3"
    
    Write-Host "IE protection mode turned Off successfully"
    Start-Sleep -s 2
    
    # 3. Bring down security level for all zones
    
    #Set Level 0 for low 
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" -Name 1A10 -Value "0"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 1A10 -Value "0"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" -Name 1A10 -Value "0"
    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4" -Name 1A10 -Value "0"
    
    Stop-Process -name explorer
    

    提前谢谢各位!!

    0 回复  |  直到 6 年前
        1
  •  1
  •   user12898235    5 年前

    只需删除“0”并替换为0它对我有效。

    Set-ItemProperty -path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" -Name 1A10 -Value 0