Give the web user (the IIS anonymous site user) read access to HKEY_USERS\S-x-x-xx-xxxxxxxxx-xxxxxxxxx-xxxxxxxxxx-xxxx\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones. Replace the x's with the SID of the user under which the app pool is running.

To find the SID for the App User:

• Open regedit and go to the HKEY_USERS\ key
• look at the permissions of each subkey (which is a SID) .. the one with the app user explicity defined is the one that is desired
• The SID can also be found by running this script (save to a file with a .vbs extension):
  strComputer = "."
  strDomain = "DESIRE2LEARN"
  strUser = "appuser"
  Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
  Set objAccount = objWMIService.Get ("Win32_UserAccount.Name='" & strUser & "',Domain='" & strDomain & "'")
  Wscript.Echo objAccount.SID
  
  Change the username above to the app user, and change the domain name. If the app user is a local user, use the local computer name instead of the domain.

Now that the SID is acquired go to the full reg entry HKEY_USERS\S-x-x-xx-xxxxxxxxx-xxxxxxxxx-xxxxxxxxxx-xxxx\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones and grant the "read" permission to the anonymous Web User.

Recycle the app pools

To test this upload a file into user homepages that has an .html extension (this is a good way to check because it is applicable to all D2L versions). Test this out before and after making the registry change.

As always, be careful in the registry.