Solved

How to best deploy default security zones without forcing using IEAK or GPO with IE 11

Posted on 2013-11-26
3
682 Views
Last Modified: 2013-12-15
We are planning to upgrade to IE 11 firm wide and I am looking for the best option to deploy a default set of "Intranet sites" and "Trusted Sites" to all staff.  I can do this using IEAK, but it appears that GPO preferences are starting to become a preferred option.  Is there a way to use GPO preference to deploy a default set of Intranet and Trusted sites and allow staff to add additional sites to each as needed to their own Intranet/Trusted sites in IE?

Thanks
Lyle
0
Comment
Question by:YeoLyle
  • 2
3 Comments
 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 250 total points
ID: 39677875
Yes there is. Proceed as follows:
These settings are registry settings. So download regfromapp, a small tool by nirsoft, free. Let it filter what IE11 does and do your adjustments. Then pick the settings and distribute those using group policy preferences. There is a wizard option in GPP that lets you choose multiple settings easily.
0
 

Accepted Solution

by:
YeoLyle earned 0 total points
ID: 39709662
Thanks McKnife, the part where you stated that these were registry settings pointed me in the right direction.  I ended up tracking the locations down to 2 different locations:

HKCU/Software/Microsoft/Windows/CurrentVersion/Internet Settings/ZoneMap/Domains
and
HKCU/Software/Microsoft/Windows/CurrentVersion/Internet Settings/ZoneMap/EscDomains

I added the sites in accordingly and set the referenced http or https to the corresponding value for the Zone I wanted and that does it.
0
 

Author Closing Comment

by:YeoLyle
ID: 39719751
I chose my comment as the solution because people looking for the solution are pointed to the registry settings that resolved my issue.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The article will show you how you can maintain a simple logfile of all Startup and Shutdown events on Windows servers and desktops with PowerShell. The script can be easily adapted into doing more like gracefully silencing/updating your monitoring s…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now