We help IT Professionals succeed at work.

Group Policy and IE Site to Zone Assignment List issues

7,659 Views
Last Modified: 2013-11-16
Hello Experts,

We are getting frustrated with using Group Policy to push out standard sites to zones for our Intranet and trusted Internet sites.  The Group Policy works but locks down the ability for users to add additional sites (in other words adding sites additional to the ones pushed down via GPO).  BTW, we're at Windows Server 2012 forest/domain functional level.

Is there a way to push out site to zone assignments to IE via GPO and also allow users to add site to zone assignments on their own?

The GPO settings I'm talking about are under User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.

The link below outlines the strategy we're attempting to follow.

http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-configure-internet-explorer-security-zone-sites/

The problem is this:  We configure the GPO with the assignments that we know of.  A user then gets a certificate error or otherwise blocked for a new web site.  They know it's legitimate (like our bank) and they want to add it to their trusted Internet zone and can't (locked down by administrator if GPO is in place).  Now IT has to get involved and add the site to the GPO.  User is mad by the time that happens.
Comment
Watch Question

Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Rob CambraManager of Infrastructure

Author

Commented:
Not really a solution to the problem but the reality we forced to live with apparently.
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.