Solved

How to add to users Intranet a URL needed via GPO for a trusted site.

Posted on 2016-11-15
5
41 Views
Last Modified: 2017-01-11
We lock down our user I/E so that they cannot add anything to their trusted sites but we need to add a particular url to all users Intranet settings and need to do this via a GPO.
Can someone tell me where to make this setting?
I found this but when I add it to the GPO, it does allow the users to add urls to their trusted sites for their Intranet, but we don't want them to add in the URL we want the GPO to push the setting for the URL to them..


Computer Configuration>Administrative Templates>Windows Components>Internet Explorer>Internet Control Panel>Security Page...
Then here you can find the policy for "Site to Zone Assignment List"
You will need to enable it then add your url's right in there. Each zone assignment is going to have a numerical value. For entries into the trusted zone, use the value "2".
0
Comment
Question by:vmich
  • 2
  • 2
5 Comments
 
LVL 22

Expert Comment

by:yo_bee
ID: 41889055
When you set the site to =2 that is the Trusted Sites not the Intranet Site.  Set it to 1 you will get the desired results.
Read this : http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-configure-internet-explorer-security-zone-sites 
It explains it perfectly.
0
 
LVL 1

Author Comment

by:vmich
ID: 41889483
I apologize for not adding that in my notes but we did change the 2 to a 1 and all it did was allow the users to have access to the trusted sites but it did not put the url into for us...
0
 
LVL 7

Expert Comment

by:Andy
ID: 41889501
Hi, if not already done, you should Disable the users Ability to Add or Remove Sites from Internet Explorer Security Zones
This article explains how to do this.

http://www.eightforums.com/tutorials/22832-ie-security-zones-enable-disable-add-remove-sites.html

Then you should be able to still add/remove sites using the Site to zone assignment list
1. Intranet zone
2. Trusted Sites zone
3. Internet zone
4. Restricted Sites zone
0
 
LVL 22

Accepted Solution

by:
yo_bee earned 500 total points
ID: 41889585
Just notices that you applied the setting to the computer and not the user. Change the setting so it is under the User Configuration and not the Computer Configuration.
0
 
LVL 1

Author Closing Comment

by:vmich
ID: 41889659
That was it.. Added it under users config and all worked perfect..
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DFS Replication in Another Domain 3 56
Server 2012 R2 TLS 1.2? 2 40
Active Directory Failed Logon Attempts. 18 54
Inactive computer in domain 7 64
We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question