Do not preserve zone information in file attachments This policy setting allows you to manage whether Windows marks file attachments from Internet Explorer or Microsoft Outlook Express with information about their zone of origin (such as restricted, Internet, intranet, or local). This policy setting requires that files be downloaded to NTFS disk partitions to function correctly. If zone information is not preserved, Windows cannot make proper risk assessments based on the zone where the attachment came from. If the Do not preserve zone information in file attachments setting is enabled, file attachments are not marked with their zone information. If this policy setting is disabled, Windows is forced to store file attachments with their zone information. Because dangerous attachments are often downloaded from untrusted Internet Explorer zones such as the Internet zone, Microsoft recommends that you configure this policy setting to Disabled to help ensure that as much security information as possible is preserved with each file. Counter Measure: Configure the Do not preserve zone information in file attachments setting to Disabled. Potential Impact: None, this is the default configuration.

(1) GPO: User Configuration\Administrative Templates\Windows Components\Attachment Manager\Do not preserve zone information in file attachments (2) REG: HKEY_USERS\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments\SaveZoneInformation (3) WMI: ###