The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy. The Archives for this list can be found on this page.

List Posts

Unanswered Active Topics

Forums Search

Forums >GPTalk >GPTalk Mailing List

Subject: [gptalk] IE Site-to-Zone assignment

Prev Next

You are not authorized to post a reply.

Author

Messages

gabro.net

Posts:13

04/16/2010 11:19 PM
Hi guys, I can imagine this might is an old and long debated story. but I've been challenged again to create a GPO to add some sites to IE Trusted site zone by allowing users to add more sites to IE security zones. I recall I worked on this matter a couple of years ago and I found the following options with pros and cons: - IEM allows users to modify the TRUSTED ZONE but it's bugged and tricky to use - Native Admin Templates are clear to use and reliable, but does not allow end-users to modify the TRUSTED ZONE - GPP is brilliant but requires the GPP Client-Side extention and does not work on pre-XP OSes - creating a custom Admin Template is kind of unfeasible because of the way the information is stored in the registry: the domain name is part of the key you would put in the ADM's KEYNAME and the Admin Template does not allow part of the regkey being specified in VALUENAME. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\internet Settings\ZoneMap\Domains\domain.com\"www" Is this all confirmed yet..or are there any new "smarter" options (other than GPP)? Thanks a lot - Gabriele.

dmarelia

Posts:394

04/17/2010 12:37 AM
I think you've got it right Gabriele. And, in fact, GPP, for whatever reason, does not let you manage trusted sites. That option is greyed out, even though you can set other zone settings from it. Perhaps MS decided 3 different ways of managing trusted site lists was just too confusing . Darren From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Gabriele Scolaro Sent: Friday, April 16, 2010 3:04 PM To: xxxxxxxxxxxxxxxx Subject: [gptalk] IE Site-to-Zone assignment Hi guys, I can imagine this might is an old and long debated story... but I've been challenged again to create a GPO to add some sites to IE Trusted site zone by allowing users to add more sites to IE security zones. I recall I worked on this matter a couple of years ago and I found the following options with pros and cons: - IEM allows users to modify the TRUSTED ZONE but it's bugged and tricky to use - Native Admin Templates are clear to use and reliable, but does not allow end-users to modify the TRUSTED ZONE - GPP is brilliant but requires the GPP Client-Side extention and does not work on pre-XP OSes - creating a custom Admin Template is kind of unfeasible because of the way the information is stored in the registry: the domain name is part of the key you would put in the ADM's KEYNAME and the Admin Template does not allow part of the regkey being specified in VALUENAME. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\internet Settings\ZoneMap\Domains\domain.com\"www" Is this all confirmed yet....or are there any new "smarter" options (other than GPP)? Thanks a lot - Gabriele.

gabro.net

Posts:13

04/17/2010 1:06 AM
3 different ways. neither one is really good! J - Gabriele. From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Darren Mar-Elia Sent: sabato 17 aprile 2010 1:11 To: xxxxxxxxxxxxxxxx Subject: RE: [gptalk] IE Site-to-Zone assignment I think you've got it right Gabriele. And, in fact, GPP, for whatever reason, does not let you manage trusted sites. That option is greyed out, even though you can set other zone settings from it. Perhaps MS decided 3 different ways of managing trusted site lists was just too confusing J. Darren From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Gabriele Scolaro Sent: Friday, April 16, 2010 3:04 PM To: xxxxxxxxxxxxxxxx Subject: [gptalk] IE Site-to-Zone assignment Hi guys, I can imagine this might is an old and long debated story. but I've been challenged again to create a GPO to add some sites to IE Trusted site zone by allowing users to add more sites to IE security zones. I recall I worked on this matter a couple of years ago and I found the following options with pros and cons: - IEM allows users to modify the TRUSTED ZONE but it's bugged and tricky to use - Native Admin Templates are clear to use and reliable, but does not allow end-users to modify the TRUSTED ZONE - GPP is brilliant but requires the GPP Client-Side extention and does not work on pre-XP OSes - creating a custom Admin Template is kind of unfeasible because of the way the information is stored in the registry: the domain name is part of the key you would put in the ADM's KEYNAME and the Admin Template does not allow part of the regkey being specified in VALUENAME. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\internet Settings\ZoneMap\Domains\domain.com\"www" Is this all confirmed yet..or are there any new "smarter" options (other than GPP)? Thanks a lot - Gabriele.

You are not authorized to post a reply.

Forums >GPTalk >GPTalk Mailing List > [gptalk] IE Site-to-Zone assignment

ActiveForums 3.7

Ads

The GPTalk Mailing List

List Posts

Members

Ads