We help IT Professionals succeed at work.

HOW: Enforcing Group Policy  with Trusted Sites but allow users to add to their Own Trusted Sites

ShielDZEEE
ShielDZEEE used Ask the Experts™
on
Both platforms:

Server 2008 & Server 2012

HOW: can we enforcing Group Policy  with pre-populated Trusted Sites but allow users to add to their Own Trusted Sites.

I have seen it before but told it can't be done.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Add the sites to trusted sites via GP Registry preference, this way it won't lock trusted sites out.
Trusted sites registry setting
http://nefaria.com/2009/10/adding-trusted-sites-for-ie-via-the-registry/
GP Registry prefences
https://technet.microsoft.com/en-us/library/cc753092.aspx
Distinguished Expert 2018
Commented:
But this will let users modify sites that we set as well. You can't have both, using gpp means we preset things but they are still changeable.
If you use Citrix or Remote Apps you could publish IE with the locked down settings in place and another IE instance that is not locked down...

Author

Commented:
Thanks all