Solved

How to add to users Intranet a URL needed via GPO for a trusted site.

Posted on 2016-11-15
5
22 Views
Last Modified: 2016-11-16
We lock down our user I/E so that they cannot add anything to their trusted sites but we need to add a particular url to all users Intranet settings and need to do this via a GPO.
Can someone tell me where to make this setting?
I found this but when I add it to the GPO, it does allow the users to add urls to their trusted sites for their Intranet, but we don't want them to add in the URL we want the GPO to push the setting for the URL to them..


Computer Configuration>Administrative Templates>Windows Components>Internet Explorer>Internet Control Panel>Security Page...
Then here you can find the policy for "Site to Zone Assignment List"
You will need to enable it then add your url's right in there. Each zone assignment is going to have a numerical value. For entries into the trusted zone, use the value "2".
0
Comment
Question by:vmich
  • 2
  • 2
5 Comments
 
LVL 21

Expert Comment

by:yo_bee
Comment Utility
When you set the site to =2 that is the Trusted Sites not the Intranet Site.  Set it to 1 you will get the desired results.
Read this : http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-configure-internet-explorer-security-zone-sites
It explains it perfectly.
0
 

Author Comment

by:vmich
Comment Utility
I apologize for not adding that in my notes but we did change the 2 to a 1 and all it did was allow the users to have access to the trusted sites but it did not put the url into for us...
0
 
LVL 6

Expert Comment

by:Andy
Comment Utility
Hi, if not already done, you should Disable the users Ability to Add or Remove Sites from Internet Explorer Security Zones
This article explains how to do this.

http://www.eightforums.com/tutorials/22832-ie-security-zones-enable-disable-add-remove-sites.html

Then you should be able to still add/remove sites using the Site to zone assignment list
1. Intranet zone
2. Trusted Sites zone
3. Internet zone
4. Restricted Sites zone
0
 
LVL 21

Accepted Solution

by:
yo_bee earned 500 total points
Comment Utility
Just notices that you applied the setting to the computer and not the user. Change the setting so it is under the User Configuration and not the Computer Configuration.
0
 

Author Closing Comment

by:vmich
Comment Utility
That was it.. Added it under users config and all worked perfect..
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now