Windows: Add an IP Address to the local intranet zone

Hi,

the internet explorers security zones affects more windows components then the internet explorer itself. For example the Windows File Explorer or the Windows Powershell.

To add an IP Address respectively IP Address range you have to create some registry keys. In this example the IP Address 10.10.200.3 should added to the local intranet zone.

These commands adds the domain to the local intranet zone (Value 1, of the third command)

C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\10.10.200.3" 
C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\10.10.200.3" /v "*" /d 1 /t REG_DWORD

Then allow all protocols (“*” value of the third command). Valid protocols are https, http, file, *

C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges"
C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1"
C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1" /V "*" /D 1 /t REG_DWORD
C:\> reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1" /v ":Range" /d "10.10.200.3" /t REG_SZ

C:\>

It’s also possible to define ip Ranges. Replace 10.10.200.3 in the previous commands by:

10.222.100-200.*
192.*.*.*
....

Not tested yet: Is a reboot or logoff/logon required after settings the keys?

Michael

Leave a Reply