Wrong site to zone assignment

Hello Team

I am currently facing an issue with the site to zone assignmet list in combination with a security warning when executing a shortcut that resides on a dfs share.

Security Warning
path: \\domain.local\...\Applikation.lnk

The site to zone assignment list has been configured through gpo (user settings) and is applied correctly to its client


file://domain.local
\\domain.local
*://*.domain.local

2019-02-04-16_38_27-Admin-Desktop.png
reg1.png
reg2.png
 

After a little bit investigation it looks like the dfs path domain.local will still be recognized as a internet zone. Maybe somone has a clue why the dfs path will be recognized as an internet zone and not as a intranet zone because of the site to zone assignment list

The issue only occurs with server 2016 (same gpo applied to windows 7 clients works fine).
ADMX Files are still 2008R2 / Win7

Unfortunately the issue still persists even after applying \\domain.local with option 1 to the site assignment list (https://www.experts-exchange.com/questions/29063519/DFS-Namespace-creates-error-massage-for-users-file-outside-of-your-local-network.html or https://myworldofit.net/?p=980)

Regards
LucaSystem EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LucaSystem EngineerAuthor Commented:
Problem was that server 2016 internet explorer has the "hardened" option enabled

Workaround

Create a reg key that disables the hardening

Path: HCKU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
REG DWORD: IEHarden
Value: 0

Create the correct zone assignment key for dfs shares

https://support.microsoft.com/en-za/help/303650/intranet-site-is-identified-as-an-internet-site-when-you-use-an-fqdn-o

We have created the following two keys (don't know if both are necessary)

*://*.domain.local
\\domain.local

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
gpos

From novice to tech pro — start learning today.