?
Solved

GPO to set Intranet Zone Sites

Posted on 2014-04-04
5
Medium Priority
?
784 Views
Last Modified: 2014-04-07
Hello

I have created a GPO to set approx 5 sites to go into our Intranet Zone Sites in IE.

The GPO is only being applied to a single user so far.

When I check the site list in IE Settings it is empty, not showing any of the sites, and appears to be grey'ed out.  I am unable to manually add sites

However, when I check the registry for the test user all the sites are showing as the Intranet Zone.

Any idea why this would be?  I need to confirm one way or another if the GPO is working correctly

Thanks in advance
0
Comment
Question by:Wolf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 2

Expert Comment

by:SieQ
ID: 39977678
First of all
Check group policy modeling for the test user
and on user's workstations run gpupdate /force, check application log on the workstation and run the gpresult on the worksation, maybe for some reason GPO is not applied properly.
Logoff/Logon user and reboot workstation, try other workstation
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39977697
I think from GPO you have blocked users access to intranet sites zone
http://msdn.microsoft.com/en-us/library/ms815134.aspx

Check if any applied GPO has blocked above settings and undone if required
0
 
LVL 1

Author Comment

by:Wolf
ID: 39977707
I think we want to stop users from manually being able to add sites anyway, as its controlled by admin.  However, i am confused as although the sites we added show in the registry they don't show in IE.

I think they don't show simply because we don't allow users to change the settings, but I wasn't sure...
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 39977720
If sites are showing through registry, they are already there

Try below
Ask your admin to add new site in local intranet zone
Then run gpupdate /force on domain controller and client as well
Then check again client registry and find out if it reflects newly added site

Mahesh.
0
 
LVL 1

Author Closing Comment

by:Wolf
ID: 39982735
This was correct, thanks for the help
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses
Course of the Month10 days, 15 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question