Site to zone assignment will not apply in Terminal Server

Posted on 2006-04-06
Last Modified: 2012-06-22
Hello All,

This is a very challenging one, so for all you it goeroes out there, here goes nothing.... ;)

I have a Citrix Terminal Server farm. They are located within their own OU and a policy is applied on this OU only. Off course the "local loopback processing" option is enabled. Now i have to add a site to the trusted sites, because ther's a Java applet that needs to be loaded. Users, while logged into the TS session, are not able to add their own sites to trusted sites, due to policies applied on the OU. So, policy freakisch as i am, i went to the user configuration --> Administrative Templates --> Windows Components --> Internet Explorer --> Internet Control Panel --> Security Page and added the site to the option "Site to Zone Assignment list" with a value of 2 (Trusted site value).

After doing a gpupdate /force on the TS and logging with a user, nothing happended, so unfortenately, it looks like the policy isn't applied. Does anybody have any idea why this doesn't work?? Or does anybody know why this happens (or does not happen??)
Question by:rhandels
    LVL 19

    Accepted Solution

    Try setting it also for the computer configuration part. If you configure the Site to Zone Assignment List policy setting for both Computer Configuration and User Configuration, both of these lists are used. If you set this policy setting for either computers or users, lists that are stored as preferences are ignored.

    If this doesn't help, log on to the server and run RSoP (start->run->rsop.msc) to see whether the policy is applied correctly.

    Enable debug logging, reboot and look in the event logs for relevant errors:
    LVL 23

    Author Comment

    Hi CoccoBill,

    Thanx for your reply, but unfortenately i allready tried all the above things.. Running RSOP shows that it should be applied but it just isn't.. My idea is (didn't want to encourage anyone. ;:) that this is some sort of bug in the Microsoft GPO's.. I've tried all the obvious stuff to no avail.. Even got an MVP to have a look at the problem, but nobody seems to know what is going wrong here... I hoped that somebody encountered the same problem and had some sort of fix or workaround for the problem.. EVen creating a new OU and just setting these options does't work..

    So if anybody ever encountered this problem, please please let me know....
    LVL 23

    Author Comment

    Stupid stupid me..

    I figured it out, problem was that we didn't have SP1 on our TS servers. So after installing it, zone assignemnt worked.. Only pronblem is, you don't want SP1 in your Metaframe XP Citrix server, so we ended up importing a reg key into the logon script... This did the trick ...

    And CocoBIll, thanx for the help.. I'll give you the points..

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now