0 = "Local machine" 1 = "Local intranet" 2 = "Trusted sites" 3 = "Internet" 4 = "Restricted sites"
Set-Content -Stream Zone.Identifier -Value [ZoneTransfer],ZoneId=3 -Path <file>
Remove-Item -Stream Zone.Identifier -Path <file>
Get-Item -Stream Zone.Identifier -Path <file>
Get-Content -Stream Zone.Identifier -Path <file>