I am somewhat green on AD so if this is simple issue I apologize. I ran across this the other day while trying to troubleshoot a user issue. Is it "normal" when you set IE security settings in the GPO for the regkeys to be correctly created in HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMapKey BUT not display when you review them in IE itself? I am using roaming profiles and IE6 on my Windows 2003R2 terminal servers. -Matt ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************