can not be done through GPO so that is out of the question

tried adding
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mytest.org]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mytest.org\pacs]
"https"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\mytest.org]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\mytest.org\pacs]
"https"=dword:00000002

which worked in xp but isn't in Windows 7

changed the [HKEY_LOCAL_MACHINE] to [HKEY_CURRENT_USER] and it works but only on that individual user, trying to get this to work for anyone who logs onto the machine.

Any thoughts?

Use Active Setup, that's how MS does things like this. You can easily add a few registry keys that will handle this for you. Look at this site.

http://bonemanblog.blogspot.com/2004/12/active-setup-registry-keys-and-their.html

Fail

how is that helpful?

Well if you know how active setup works it checks the HKCU for the logged in user and if the registry key does not exist it creates it. I have used it many times for my customers and it has always worked flawlessly assuming you understand how it works. As an added bonuse since it stabs the HKCU registry elevated rights are not needed for the logged in user.

thanks for the help, that wasn't pointed at you but at the person who posted behind you