Solved

IE - Add Trusted Site through gROUP pOLICY

Posted on 2012-03-09
7
767 Views
Last Modified: 2012-03-31
I'm trying to add a trusted site to all pc's using Group Policy.  I already have existing sites being pushed to workstations with this policy.  When I view the Settings tab for my existing policy I see the current entries listed as:
"Sites in this zone" under
User Config\Policies\Win. Settings\IE Maint.\Sec/Security Zones and Ratings\Security Zones and Privacy\Trusted Sites (Security Level:Custom)

I've made a copy of this policy for testing.  When I attempt to edit the copy I do not see my current trusted sites entries.

I think this is related to IE ESC importing the current settings for the logged on user.  Is there a way to edit the GPO directly without importing?

I am administering on a Server 2008 R2 box.
0
Comment
Question by:Encinitas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 17

Expert Comment

by:Premkumar Yogeswaran
ID: 37708326
I would suggest to use Computer configuration for Trusted sites setting instead of user conf.

Step in the link below
http://www.makeuseof.com/tag/configure-trusted-sites-internet-explorer-group-policy/

Regards,
Prem
0
 

Author Comment

by:Encinitas
ID: 37712330
Thanks Prem.  That method does seem to add sites into client browser's more comprhensively.  With this method though users are not able to add there own trusted sites.  Do you know if there is a seperate setting that would allow users to still edit those?
0
 
LVL 17

Expert Comment

by:Premkumar Yogeswaran
ID: 37715603
Hi Encinitas,

I that case, you need to go for user configuration in GPO, as you mentioned in your question.

You can use with out importing. Use do not customize ratings.

refer this link:
http://sgwindowsgroup.org/blogs/bernard/archive/2010/03/03/adding-trusted-sites-to-internet-explorer-using-gpo.aspx

Regards,
Prem
0
Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

 

Author Comment

by:Encinitas
ID: 37717133
"You can use with out importing. Use do not customize ratings."

I'm not able to do this.  When "Do not customize security zones and privacy" is selected, the "Modify Settings" button is greyed out.

This is true with IE ESC both enabled and disabled.
0
 

Author Comment

by:Encinitas
ID: 37717473
I've also tried to administer GPO using a Win 7 box with RSAT installed.  Same limitation with greyed out Modify Settings button.
0
 

Accepted Solution

by:
Encinitas earned 0 total points
ID: 37767768
In the end, I configured the browser on the Windows7 w/ RSAT machine to have the settings that I wanted deployed via GPO.  Imported those into Group policy.  Not ideal for long term administration but did the trick.
0
 

Author Closing Comment

by:Encinitas
ID: 37790383
Offered solutions did not provide resolution.  End result was based on my own further investigation and experimentation.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question