asked on

Automatically add web site to intranet zone list in Internet Explorer Security settings

I have a company intranet that needs to prompt the user for a password if it is accessed outside the company network, but allow access to the site with no prompt if it is accessed from within the network. To do this, I have gone into IIS under "Directory Security" and "Anonymous Access and Authentication control" and checked "Integrated Windows authentication". I have left "Anonymous Access" blank. Then, under Internet Explorer settings, under the Security tab, then local Intranet Sites, and "Advanced", I have added the intranet site to the list of local intranet zone sites. This has allowed the behavior I want - my office machine (when connected to the network) does not prompt me for a username or password to access this site, however if I attempt to access the site from my home or some other non-networked location, it prompts me for a username and password, and I have to enter my Windows username and password.

My problem is this - we have a couple of hundred employess, and I need to be able to add this site to the "local Intranet Sites" zone list on each of their machines autmatically, either with a batch, and exe, or some other automated method. Is there a way I can do this?

Thanks,
Christy

Asta Cu

Sorry to see no one has stepped in here to help yet, Christy, and not sure I can help. But curious if you've used or explored the IEAK option to roll out customized browsers; here's a bit of info on that.
Internet Explorer Administration Kit 6 Service Pack 1
Easily customize, deploy, and manage your installations of Internet Explorer 6 SP1.
http://www.microsoft.com/windows/ieak/downloads/ieak6/ieak6sp1.mspx
IEAK Downloads
This page contains downloads for all critical updates and recommended releases for the Internet Explorer Administration Kit.
http://www.microsoft.com/windows/ieak/downloads/default.mspx
Internet Explorer Administration Kit Home Page
Evaluate IEAK and learn how easy it is to tailor a custom browser to meet your customers' needs.
http://www.microsoft.com/windows/ieak/default.mspx

ccbailey

ASKER

I haven't looked at this yet - thanks for the suggestion. I am currently working on another deadline, but as soon as I get a chance I will look into this.

Thanks!

ccbailey

ASKER

Sorry I haven't responded. I have been working on other items. I will take a look at these solutions today and post a response. I hope that is OK.

Thanks,
Christy

ccbailey

ASKER

OK, I downloaded the IEAK and installed it, but I have a couple of questions.

First, when I try to install the program, it asks me to choose the license agreement I signed for distribution of Microsoft Internet Explorer or that which includes only the functionality allowed by your distribution license agreement. Then it gives the following choices:

- External License and Distribution Agreement for Internet Explorer (e.g. Internet Service Providers)
- External License and Distribution Agreement for Internet Explorer (e.g. Content Providers and Developers)
- Site License and Intranet (internal use) Distribution License (e.g. Corporate Administrators)

My second question is this: Do I have to reinsall IE6 using the IEAK for all users in order to be able to customize settings, or can I use an existing installation and deploy the new settings I want only?

Thanks for your help,
Christy

Venabili

Any update here? Asta, are you still with us?

Venabili

Asta Cu

Sorry for the delay in responding, I'm off to an appointment, but will return later today with some insight.
Thank you.
Asta

Asta Cu

In the meantime, hopefully this will give some guidance.
Internet Explorer Administration Kit 6 Deployment Guide

This is a comprehensive guide to preparing, managing, and deploying custom installations of the Internet Explorer browser using IEAK 6.

• Internet Explorer 6 Resource Kit

Find resources to maximize the speed, security, and reliability of Internet Explorer 6—while minimizing maintenance and support costs.

• Components of IEAK

Want to know what you get with Internet Explorer 6? IEAK is used to deploy and customize Internet Explorer components.

• Previous Versions of IEAK

If you are using IEAK version 5.5, 5, or 4, visit the previous versions section of this site for corporate deployment guides, downloads, and technical support options available to you.

• Internet Explorer Enhanced Security Configuration on Windows Server 2003

This white paper explains how to manage Internet Explorer 6 for Microsoft Windows® Server 2003 to allow access to trusted resources and Web sites on a corporate intranet and on the Internet.

Have a question about your CD order? Curious about IEAK licensing? Send e-mail with your questions.

• Lost your Customization Code?

Know your IEAK registered e-mail address, but lost your code? We can retrieve it and send it to you in e-mail.

• FAQs and Highlights

Visit the Microsoft Product Support Services site to search technical support articles and frequently asked questions.

• Search the Knowledge Base

Search technical support information and self-help tools in using the Microsoft Knowledge Base.

• Contact Support

Need more help than you've found so far? Check out the Product Support Services site for the links, telephone numbers, and contacts available to you as a registered user of Internet Explorer 6 and Internet Explorer 5.x.

Asta Cu

http://www.microsoft.com/technet/prodtechnol/ie/ieak/support/default.mspx

ccbailey

ASKER

Does the customization code have to do with licensing? I am not the Administrator, so I do not know what email was registered, if any.

Also, I am still wondering if I can deploy setting only, if the original installation was not a deployment. I tried searching the Knowledge Base about this, but everything I could find was talking about installing Internet Explorer rather than only installing settings.

Thanks,
Christy

Asta Cu

Sorry to say, Christy, I haven't had any time this week (month) to research further, and hope to have some more time mid July.... let's see if this helps any.

You cannot manage Internet Explorer 6 Group Policy settings on a Windows 2000-based computer
You cannot manage Internet Explorer 6 settings for Microsoft Windows 2000-based computers by using Active Directory Users and Computers, Active Directory Sites and Services, or the stand-alone Group Policy snap-in in Microsoft Management Console...
http://support.microsoft.com/default.aspx?scid=kb;en-us;316116
Using Windows XP Professional with Service Pack 1 in a Managed Environment: Controlling Communication with the Internet - Internet Explorer 6
Outlines steps for planning and deploying configurations for Internet Explorer 6 in a way that balances users' requirements for Internet access with an organization's requirements for protection of networked assets.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpmanaged/11_xp_ie.mspx
Windows XP Service Pack 2 and the Internet in a Managed Environment: Internet Explorer 6
Outlines steps for planning and deploying configurations for Internet Explorer 6 in a way that balances users’ requirements for Internet access with an organization’s requirements for protection of networked assets.
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/intmgmt/10_xpie.mspx
Advanced privacy settings and per-site privacy actions are not imported by the IEAK
When you use Group Policy or the Microsoft Internet Explorer Administration Kit (IEAK) to import advanced privacy settings and per-site privacy actions, these settings may not be imported into your customized IEAK build. This problem may occur...
http://support.microsoft.com/default.aspx?scid=kb;en-us;323061
Updating Browser Configuration Settings
Internet Explorer Administration Kit: Deployment Guide
http://www.microsoft.com/technet/prodtechnol/ie/ieak/techinfo/deploy/60/en/dep_updatbro.mspx
Internet Explorer Maintenance Extension Tools and Settings: Group Policy
Internet Explorer Maintenance Extension Tools and Settings
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/01bdc344-efcb-45f5-b7ef-aa6f8f0b8c47.mspx

ASKER CERTIFIED SOLUTION

ccbailey

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Asta Cu

Sadly I did not help you, feel free to request a refund and PAQ from Community Support via a zero point question, and include this question link with your request.
Best wishes,
Asta

ccbailey

ASKER

Thanks, Asta - I appreciate the time you've given me.

Christy