Wrong site to zone assignment

Luca
Luca used Ask the Experts™
on
Hello Team

I am currently facing an issue with the site to zone assignmet list in combination with a security warning when executing a shortcut that resides on a dfs share.

Security Warning
path: \\domain.local\...\Applikation.lnk

The site to zone assignment list has been configured through gpo (user settings) and is applied correctly to its client


file://domain.local
\\domain.local
*://*.domain.local

2019-02-04-16_38_27-Admin-Desktop.png
reg1.png
reg2.png
 

After a little bit investigation it looks like the dfs path domain.local will still be recognized as a internet zone. Maybe somone has a clue why the dfs path will be recognized as an internet zone and not as a intranet zone because of the site to zone assignment list

The issue only occurs with server 2016 (same gpo applied to windows 7 clients works fine).
ADMX Files are still 2008R2 / Win7

Unfortunately the issue still persists even after applying \\domain.local with option 1 to the site assignment list (https://www.experts-exchange.com/questions/29063519/DFS-Namespace-creates-error-massage-for-users-file-outside-of-your-local-network.html or https://myworldofit.net/?p=980)

Regards
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
System Engineer
Commented:
Problem was that server 2016 internet explorer has the "hardened" option enabled

Workaround

Create a reg key that disables the hardening

Path: HCKU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
REG DWORD: IEHarden
Value: 0

Create the correct zone assignment key for dfs shares

https://support.microsoft.com/en-za/help/303650/intranet-site-is-identified-as-an-internet-site-when-you-use-an-fqdn-o

We have created the following two keys (don't know if both are necessary)

*://*.domain.local
\\domain.local

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial