Solved

Unable to Change IE Trusted Sites

Posted on 2012-03-19
10
7,513 Views
Last Modified: 2012-03-21
I'm running up against a brick wall trying to change the sites listed in IE as trusted sites. On client machines in our domain the trusted sites are already configured and are grayed out from adding any additional sites.

I've tried finding where these are setup by opening Group Policy Management Editor and then editing our domain GPO however, I can't find it actually being set anywhere I look.

I've looked in:

User Configuration > Policies > Windows Settings > Internet Explorer Maintenance > Security > Security Zones & Content Ratings > Modify Settings > Trusted Sites > Sites

When I look here, it shows the sites that are added as trusted sites, but all of the options are grayed out so I can't make any adjustments.

Note: It may be of use to know that when I looked at the Internet Properties it says at the bottom "Some settings are managed by your system administrator" even though I'm looking at the group policy.



I've also looked in:


User Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List


I've set this to "Not Configured" but it doesn't appear to have any effect on the site settings.

This is a Windows Server 2003/2008 hybrid environment and is at the 2003 functional level.

Where else could this be set that I'm missing here?


Thanks in advance for any help!
0
Comment
Question by:Bigchingan
  • 4
  • 2
  • 2
  • +2
10 Comments
 
LVL 30

Expert Comment

by:IanTh
ID: 37739987
0
 
LVL 30

Expert Comment

by:IanTh
ID: 37739988
oops pesky ee page not showing error meant double post
0
 
LVL 16

Expert Comment

by:l33tf0b
ID: 37740027
I'd check to see if all machines are patched and up to date with the latest service packs / windows updates.
0
 

Author Comment

by:Bigchingan
ID: 37740048
The linked to solution may help, I will see. However, the trusted sites are still being populated from somewhere and I would like to find that out as I think it may be the answer for the problem as a whole.

The systems are updated so that is not the problem.
0
 
LVL 7

Expert Comment

by:hirenvmajithiya
ID: 37740781
Run RSoP.msc on client PC to check from where these settings are applied.

Hiren
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:Bigchingan
ID: 37741796
Hiren,

Thanks, this was helpful. It shows me the trusted sites are a result of a Group Policy. However, I still don't see those sites when I look at the group policy itself and the area is grayed out so that I cannot change anything.

Now that I'm able to see that these sites are in fact a result of group policy, is there a way to determine where that policy is set?

When I look at the "Security Zones Precedence" the only thing listed is Default Domain Policy. When I am looking at the settings that show those trusted sites, am I viewing the settings from the default domain policy or is it something else?



Thanks!
0
 

Author Comment

by:Bigchingan
ID: 37741822
Also, just to note. The hotfix above was not the solution. The systems are running Windows 7 with all of the most recent updates and that solution is only for Windows Vista and earlier.
0
 
LVL 16

Accepted Solution

by:
ThinkPaper earned 300 total points
ID: 37743014
You will need to configure the group policy under Computer Configuration instead of User Configuration.

Computer Configuration/Policies/Administrative Templates/Windows Components/Internet Explorer

Sites to Zone Assignment List
1-Local, 2-Trusted, 3-Internet, 4-Restricted

When you configure the settings under User Configuration/Internet Explorer Maintenance, you are setting the DEFAULT settings for the computer (which is usually helpful when you are creating an image of the workstation). It does NOT enforce the settings after the fact.
0
 

Author Comment

by:Bigchingan
ID: 37743062
ThinkPaper, I believe you may have just provided the proper answer.

I've read countless things via Bing/Google and have yet to come across anything saying to use the computer configuration.


I'm going to make the changes here (which lists the other sites) and will then award the answer once it works. Thank you!!!
0
 
LVL 7

Assisted Solution

by:hirenvmajithiya
hirenvmajithiya earned 200 total points
ID: 37745719
The settings for the trusted sites are at two places. In Computer Configuration as well as in User Configuration.

In Computer configuration have a look at Computer Configuration > Administrative Tools > Windows Components > Internet Explorer > Internet Control Panel > Security Page and then trusted sites. Here you will see the Trusted Zone Sites. One more settings is
Then have a look at "Site to zone assignment list"

Ref: http://www.makeuseof.com/tag/configure-trusted-sites-internet-explorer-group-policy/

In User Configuration see the following :
User Configuration > Windows Settings > IE Maintenance > Security > Security
Another one is at User Configuration > Preferences > Control Panel Settings > Internet Settings
Ref: http://technet.microsoft.com/en-us/library/cc754649.aspx

I think this should help you out.

Hiren
0

Featured Post

The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now