Hello, I'm trying to implement GetSecurityID to prevent the ACCESS DENIED message when accessing an IFRAME. But it does not work. Every string I return seems to be wrong and makes the browser control report ACCESS DENIED messages even when I try to read the ReadyState. Here comes my function: Public Function GetSecurityId(ByVal pwszUrl As String, ByVal pbSecurityId() As Byte, ByRef pcbSecurityId As UInteger, ByVal dwReserved As UInteger) As Integer Implements nextpractice.APPHandler.COM.IInternetSecurityManager.GetSecurityId Dim id As String = "prot:root+" & Chr(0) & Chr(0) & Chr(0) & Chr(0) Dim enc As System.Text.Encoding = System.Text.Encoding.ASCII pbSecurityId = enc.GetBytes(id) pcbSecurityId = enc.GetByteCount(id) Return S_OK End Function I tried many different combinations, for example: Dim id As String = "file:+" & Chr(0) & Chr(0) & Chr(0) & Chr(0) Dim id As String = "file//:+" & Chr(0) Dim id As String = "http://localhost+" & Chr(0) Dim id As String = "http://localhost+0" ... I don't know, if the id must end with "0" or Chr(0). Maybe the way the data is returned is also wrong. It would be great if anybody could help me...I've tried this for days and read every page google found for me...but I can't get this to work.. :-(