Solved

Adding Intranet through Group Policy

Posted on 2008-10-08
4
1,681 Views
Last Modified: 2012-08-13
We are trying to add local intranet sites through Group Policy.  When we set it up though it does not allow currect https:// sites to remain in the users' trusted sites and it will not allow the user to add any other sites to the https:// location.

What we would like to do is add local intranet sites to trusted sites for all of the employees machines through Group Policy while still allowing them to add their own sites as well.

Any ideas?
0
Comment
Question by:letotad
  • 2
  • 2
4 Comments
 
LVL 1

Accepted Solution

by:
ifmtech earned 125 total points
ID: 22670451
There are 2 ways that you can add trusted sites through Group Policy.  You can import the settings from your computer under User Configuration\Windows Settings\Internet Explorer Maintenance\Security\Security Zones and Content Ratings.
The other way to import the Sites is to go into Administrative Templates\Windows Components\Internet Control Panel\Security Page  and enter them in the policy "Site to Zone Assignment List".

I cannot recall which one, but one of these methods does not overwrite the existing sites.  Do you know which one you are using?
0
 

Author Comment

by:letotad
ID: 22670489
We are using the Administrative Templates\Windows Components\Internet Control Panel\Security Page  and enter them in the policy "Site to Zone Assignment List".  However, when we add the sites there and give them a rating of 2 it removes any sites that the user had added and does not allow any other sites to be added.  I will try the first option that you suggested and see if that resolves the issue.  I'll let you know.
0
 
LVL 1

Expert Comment

by:ifmtech
ID: 22670550
I checked our policy settings and we are using the first method and our users are able to add sites.  Just make sure that you remove the old settings in the Administrative Template ;).
0
 

Author Comment

by:letotad
ID: 22670944
That worked like a charm.  I can now add anything that I need to in all of the security settings and it will propigate down to the users machine while maintaining what they currently have set in their trusted site.  Thank you for the excellent solution.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question