Trusted Sites Greyed Out After GPO Settings

Posted on 2011-05-12
Last Modified: 2012-05-11
I've recently added trusted sites to my GPO via th Sites to Zone Assignment under CPU Policy. However, when I am a user that is a Domain Admin, the Trusted Sites section is greyed out on the machine and I can't add additional trusted sites if I wanted to.

Is there some way to fix this or is this just the natural state of things?
Question by:Bardlebee

    Expert Comment

    This problem occurs because the behavior of the Internet Options dialog box has changed in Internet Explorer 7. When the "Security Zones: Use only machine settings" Group Policy setting is enabled, you cannot use Internet Options to configure zone settings.

    So, Download this Hotfix from the link below
    LVL 37

    Accepted Solution

    Once you set something in Group Policy it cannot be set by users directly. So when you assign a list of sites to the Trusted Sites zone (or any other zone) with group policy, it cannot be changed by any local user. This is to ensure that no additional trusted sites get added to bypass security settings. If additional trusted sites must be added for Administrators, another Group Policy can be deployed that is filtered so that only Administrators can apply the policy.
    LVL 74

    Expert Comment

    by:Glen Knight
    This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now