Java permissions: registry value 1C00 (Zones\1)UserHKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1

Policy ID
IZ_PolicyJavaPermissions_3
Scope
Computer Configuration, User Configuration
Supported on
At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Internet Explorer › Internet Control Panel › Security Page › Intranet Zone

Registry

1C00

REG_DWORDUserComputer
Enabled value
Depends on the option value
Element
Java permissions
Options
ItemStored value
High safety65536
Medium safety131072
Low safety196608
Custom8388608
Disable Java0
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]

; Options (use only one)
; High safety
"1C00"=dword:00010000
; Medium safety
"1C00"=dword:00020000
; Low safety
"1C00"=dword:00030000
; Custom
"1C00"=dword:00800000
; Disable Java
"1C00"=dword:00000000
CMD
:: Options (use only one)

:: High safety
reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 65536 /f
:: Medium safety
reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 131072 /f
:: Low safety
reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 196608 /f
:: Custom
reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 8388608 /f
:: Disable Java
reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Force | Out-Null

# Options (use only one)
# High safety
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 65536 -Force | Out-Null
# Medium safety
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 131072 -Force | Out-Null
# Low safety
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 196608 -Force | Out-Null
# Custom
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 8388608 -Force | Out-Null
# Disable Java
New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 0 -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1]

; Options (use only one)
; High safety
"1C00"=dword:00010000
; Medium safety
"1C00"=dword:00020000
; Low safety
"1C00"=dword:00030000
; Custom
"1C00"=dword:00800000
; Disable Java
"1C00"=dword:00000000
CMD
:: Options (use only one)

:: High safety
reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 65536 /f
:: Medium safety
reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 131072 /f
:: Low safety
reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 196608 /f
:: Custom
reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 8388608 /f
:: Disable Java
reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1" /v "1C00" /t REG_DWORD /d 0 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Force | Out-Null

# Options (use only one)
# High safety
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 65536 -Force | Out-Null
# Medium safety
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 131072 -Force | Out-Null
# Low safety
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 196608 -Force | Out-Null
# Custom
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 8388608 -Force | Out-Null
# Disable Java
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1' -Name '1C00' -PropertyType DWord -Value 0 -Force | Out-Null