Solved

IE - Add Trusted Site through gROUP pOLICY

Posted on 2012-03-09
7
765 Views
Last Modified: 2012-03-31
I'm trying to add a trusted site to all pc's using Group Policy.  I already have existing sites being pushed to workstations with this policy.  When I view the Settings tab for my existing policy I see the current entries listed as:
"Sites in this zone" under
User Config\Policies\Win. Settings\IE Maint.\Sec/Security Zones and Ratings\Security Zones and Privacy\Trusted Sites (Security Level:Custom)

I've made a copy of this policy for testing.  When I attempt to edit the copy I do not see my current trusted sites entries.

I think this is related to IE ESC importing the current settings for the logged on user.  Is there a way to edit the GPO directly without importing?

I am administering on a Server 2008 R2 box.
0
Comment
Question by:Encinitas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 17

Expert Comment

by:Premkumar Yogeswaran
ID: 37708326
I would suggest to use Computer configuration for Trusted sites setting instead of user conf.

Step in the link below
http://www.makeuseof.com/tag/configure-trusted-sites-internet-explorer-group-policy/

Regards,
Prem
0
 

Author Comment

by:Encinitas
ID: 37712330
Thanks Prem.  That method does seem to add sites into client browser's more comprhensively.  With this method though users are not able to add there own trusted sites.  Do you know if there is a seperate setting that would allow users to still edit those?
0
 
LVL 17

Expert Comment

by:Premkumar Yogeswaran
ID: 37715603
Hi Encinitas,

I that case, you need to go for user configuration in GPO, as you mentioned in your question.

You can use with out importing. Use do not customize ratings.

refer this link:
http://sgwindowsgroup.org/blogs/bernard/archive/2010/03/03/adding-trusted-sites-to-internet-explorer-using-gpo.aspx

Regards,
Prem
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:Encinitas
ID: 37717133
"You can use with out importing. Use do not customize ratings."

I'm not able to do this.  When "Do not customize security zones and privacy" is selected, the "Modify Settings" button is greyed out.

This is true with IE ESC both enabled and disabled.
0
 

Author Comment

by:Encinitas
ID: 37717473
I've also tried to administer GPO using a Win 7 box with RSAT installed.  Same limitation with greyed out Modify Settings button.
0
 

Accepted Solution

by:
Encinitas earned 0 total points
ID: 37767768
In the end, I configured the browser on the Windows7 w/ RSAT machine to have the settings that I wanted deployed via GPO.  Imported those into Group policy.  Not ideal for long term administration but did the trick.
0
 

Author Closing Comment

by:Encinitas
ID: 37790383
Offered solutions did not provide resolution.  End result was based on my own further investigation and experimentation.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question