Trusted Sites Greyed Out After GPO Settings

Posted on 2011-05-12
Medium Priority
Last Modified: 2012-05-11
I've recently added trusted sites to my GPO via th Sites to Zone Assignment under CPU Policy. However, when I am a user that is a Domain Admin, the Trusted Sites section is greyed out on the machine and I can't add additional trusted sites if I wanted to.

Is there some way to fix this or is this just the natural state of things?
Question by:Bardlebee

Expert Comment

ID: 35747336
This problem occurs because the behavior of the Internet Options dialog box has changed in Internet Explorer 7. When the "Security Zones: Use only machine settings" Group Policy setting is enabled, you cannot use Internet Options to configure zone settings.

So, Download this Hotfix from the link below

LVL 43

Accepted Solution

Adam Brown earned 2000 total points
ID: 35755188
Once you set something in Group Policy it cannot be set by users directly. So when you assign a list of sites to the Trusted Sites zone (or any other zone) with group policy, it cannot be changed by any local user. This is to ensure that no additional trusted sites get added to bypass security settings. If additional trusted sites must be added for Administrators, another Group Policy can be deployed that is filtered so that only Administrators can apply the policy.
LVL 74

Expert Comment

by:Glen Knight
ID: 37485342
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question