[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now


Unable to Change IE Trusted Sites

Posted on 2012-03-19
Medium Priority
Last Modified: 2012-03-21
I'm running up against a brick wall trying to change the sites listed in IE as trusted sites. On client machines in our domain the trusted sites are already configured and are grayed out from adding any additional sites.

I've tried finding where these are setup by opening Group Policy Management Editor and then editing our domain GPO however, I can't find it actually being set anywhere I look.

I've looked in:

User Configuration > Policies > Windows Settings > Internet Explorer Maintenance > Security > Security Zones & Content Ratings > Modify Settings > Trusted Sites > Sites

When I look here, it shows the sites that are added as trusted sites, but all of the options are grayed out so I can't make any adjustments.

Note: It may be of use to know that when I looked at the Internet Properties it says at the bottom "Some settings are managed by your system administrator" even though I'm looking at the group policy.

I've also looked in:

User Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List

I've set this to "Not Configured" but it doesn't appear to have any effect on the site settings.

This is a Windows Server 2003/2008 hybrid environment and is at the 2003 functional level.

Where else could this be set that I'm missing here?

Thanks in advance for any help!
Question by:Bigchingan
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +2
LVL 30

Expert Comment

ID: 37739987
LVL 30

Expert Comment

ID: 37739988
oops pesky ee page not showing error meant double post
LVL 16

Expert Comment

by:Raymond Peng
ID: 37740027
I'd check to see if all machines are patched and up to date with the latest service packs / windows updates.
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.


Author Comment

ID: 37740048
The linked to solution may help, I will see. However, the trusted sites are still being populated from somewhere and I would like to find that out as I think it may be the answer for the problem as a whole.

The systems are updated so that is not the problem.

Expert Comment

ID: 37740781
Run RSoP.msc on client PC to check from where these settings are applied.


Author Comment

ID: 37741796

Thanks, this was helpful. It shows me the trusted sites are a result of a Group Policy. However, I still don't see those sites when I look at the group policy itself and the area is grayed out so that I cannot change anything.

Now that I'm able to see that these sites are in fact a result of group policy, is there a way to determine where that policy is set?

When I look at the "Security Zones Precedence" the only thing listed is Default Domain Policy. When I am looking at the settings that show those trusted sites, am I viewing the settings from the default domain policy or is it something else?


Author Comment

ID: 37741822
Also, just to note. The hotfix above was not the solution. The systems are running Windows 7 with all of the most recent updates and that solution is only for Windows Vista and earlier.
LVL 16

Accepted Solution

ThinkPaper earned 1200 total points
ID: 37743014
You will need to configure the group policy under Computer Configuration instead of User Configuration.

Computer Configuration/Policies/Administrative Templates/Windows Components/Internet Explorer

Sites to Zone Assignment List
1-Local, 2-Trusted, 3-Internet, 4-Restricted

When you configure the settings under User Configuration/Internet Explorer Maintenance, you are setting the DEFAULT settings for the computer (which is usually helpful when you are creating an image of the workstation). It does NOT enforce the settings after the fact.

Author Comment

ID: 37743062
ThinkPaper, I believe you may have just provided the proper answer.

I've read countless things via Bing/Google and have yet to come across anything saying to use the computer configuration.

I'm going to make the changes here (which lists the other sites) and will then award the answer once it works. Thank you!!!

Assisted Solution

hirenvmajithiya earned 800 total points
ID: 37745719
The settings for the trusted sites are at two places. In Computer Configuration as well as in User Configuration.

In Computer configuration have a look at Computer Configuration > Administrative Tools > Windows Components > Internet Explorer > Internet Control Panel > Security Page and then trusted sites. Here you will see the Trusted Zone Sites. One more settings is
Then have a look at "Site to zone assignment list"

Ref: http://www.makeuseof.com/tag/configure-trusted-sites-internet-explorer-group-policy/

In User Configuration see the following :
User Configuration > Windows Settings > IE Maintenance > Security > Security
Another one is at User Configuration > Preferences > Control Panel Settings > Internet Settings
Ref: http://technet.microsoft.com/en-us/library/cc754649.aspx

I think this should help you out.


Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question