The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: [gptalk] ie security zones exceptions

Prev Next

You are not authorized to post a reply.

Author

Messages

rpo8373

Posts:58

02/08/2010 3:55 AM
hi all, we have about 10 users who need to access an online training course that utilises clipboard access. the users are currently being prompted if they want to allow clipboard access when they use the site. this is fine because in a gpo linked to the users ou we have setup cutom ie zones and this is one of the settings in the internet zone. what we need to do is to allow clipboard access for this site so no prompt is displayed. at this time i'm thinking i will just add the url of this site to the trusted sites zone (which has clipboard access allowed). only issue with this is that now all users in the users ou have this url as a trusted site, not just 10 users. not a big deal i guess, but i was just hoping to keep it as tight as possible. does anyone have any better suggestions? daniel.

omar

Posts:97

02/08/2010 8:01 PM
* Create a new security group add the ten users to it. * Take the original GPO and create a copy of it and rename the copy. * Take the original GPO and add that new security group to the security filtering with DENY group policy security rights. You need to open the GPO for editing then from the gp editor window- right-click the gpo and choose properties and select the security tab- add the new group with deny in here and leave all other permissions alone * Take the copied GPO and use security filtering to apply this GPO to the new security group only using the GPMC console. * Edit the new/copied GPO and add this site to the trusted site list- and then link it to the correct OU. that's one way you can do it- but then you have two GPOs that need updates when the entire company needs an update. Omar ________________________________ From: xxxxxxxxxxxxxxxx [xxxxxxxxxxxxxxxx] On Behalf Of daniel [xxxxxxxxxxxxxxxx] Sent: Sunday, February 07, 2010 7:53 PM To: xxxxxxxxxxxxxxxx Subject: [gptalk] ie security zones exceptions hi all, we have about 10 users who need to access an online training course that utilises clipboard access. the users are currently being prompted if they want to allow clipboard access when they use the site. this is fine because in a gpo linked to the users ou we have setup cutom ie zones and this is one of the settings in the internet zone. what we need to do is to allow clipboard access for this site so no prompt is displayed. at this time i'm thinking i will just add the url of this site to the trusted sites zone (which has clipboard access allowed). only issue with this is that now all users in the users ou have this url as a trusted site, not just 10 users. not a big deal i guess, but i was just hoping to keep it as tight as possible. does anyone have any better suggestions? daniel.