[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"1803"=dword:00000003
OK so that great however the problem is that nothing is stoping the end user from going to 'Tools>Internet Options>Security>Custom Level' and enabling File Download. I know the chances are slim that my end user would know how to access this in the settings but I would still like to "Gray Out"/prevent them from reenabling. Im looking for a reg location that would disable the changing of this from the 'Tools>Internet Options>Security>Custom Level' or disable access to 'Tools>Internet Options>Security>Custom Level' all together.