| Author | Messages | |
gtmaxwell
Posts:25
 | | 06/03/2009 7:57 PM |
| Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO. Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| jpochedl
Posts:6
| | 06/03/2009 8:29 PM |
| Gregory,
If you're using a standard GPO, then the ability to change items within the trusted sites will be locked out. Why this also keeps people from at least scrolling through the list is beyond me, but it's probably simply due to the fact that _all_ controls within the window are disabled by the GPO being in place.
If you want people to be able to add / remove sites from those you specify, then the recommended course of action is to use the new Group Policy Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO. Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| TomMarantz
Posts:13
| | 06/03/2009 9:13 PM |
| This is possible through regular GPO, but Preferences can be nice...
You are using GPO IE Maintenance for these sites?
I would guess you have something locked down in
'User configuration'-'administrative templates' - 'windows components' -
'Internet explorer' - 'internet control panel'...
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 11:55 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| JamieNelson
Posts:166
| | 06/03/2009 9:32 PM |
| Gregory,
So, are users upset simply because they can't scroll the list or because
they can't modify it?
If you're providing a mandatory list through Group Policy, then I guess
I'm confused as to why they need to be able to see it. They'll know
whether or not a site is trusted by simply looking in the lower
right-hand corner of the IE browser.
Joe is correct in that there is no way to scroll that list if you're
using the Administrative Template policies to do zone mapping. You can
also set zone assignments in IE Maintenance Policy but it is kind of
messy and not nearly as granular. If users have to be able to edit that
list, then Group Policy Preferences (or a script) is the really the only
way to go as Joe already mentioned. Just keep in mind you'll have add
them as direct registry entries if you decide to go that route. Here is
a good link that describes all the security zone registry settings, if
you're interested:
http://support.microsoft.com/default.aspx?kbid=182569
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Joe Pochedley
Sent: Wednesday, June 03, 2009 2:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
If you're using a standard GPO, then the ability to change items within
the trusted sites will be locked out. Why this also keeps people from
at least scrolling through the list is beyond me, but it's probably
simply due to the fact that _all_ controls within the window are
disabled by the GPO being in place.
If you want people to be able to add / remove sites from those you
specify, then the recommended course of action is to use the new Group
Policy Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| gtmaxwell
Posts:25
| | 06/03/2009 9:36 PM |
| Classification: UNCLASSIFIED
Caveats: NONE
I've been messing with the GP Preferences, but we do not have a 2008 server
as of yet.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Joe Pochedley
Sent: Wednesday, June 03, 2009 12:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
If you're using a standard GPO, then the ability to change items within the
trusted sites will be locked out. Why this also keeps people from at least
scrolling through the list is beyond me, but it's probably simply due to the
fact that _all_ controls within the window are disabled by the GPO being in
place.
If you want people to be able to add / remove sites from those you specify,
then the recommended course of action is to use the new Group Policy
Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Maxwell, Gregory T Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO. Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| davesharples
Posts:55
| | 06/03/2009 9:45 PM |
| You don't need a 2008 box - just a vista admin tools and the CSE
deployed to the clients
On 3 Jun 2009, at 21:33, "Maxwell, Gregory T Mr CIV USA IMCOM" <xxxxxxxxxxxxxxxx
> wrote:
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> I've been messing with the GP Preferences, but we do not have a 2008
> server
> as of yet.
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx
> ]
> On Behalf Of Joe Pochedley
> Sent: Wednesday, June 03, 2009 12:28 PM
> To: xxxxxxxxxxxxxxxx
> Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Gregory,
>
> If you're using a standard GPO, then the ability to change items
> within the
> trusted sites will be locked out. Why this also keeps people from
> at least
> scrolling through the list is beyond me, but it's probably simply
> due to the
> fact that _all_ controls within the window are disabled by the GPO
> being in
> place.
>
> If you want people to be able to add / remove sites from those you
> specify,
> then the recommended course of action is to use the new Group Policy
> Preferences. (Google it for more info.)
>
> Joe P
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx
> ]
> On Behalf Of Maxwell, Gregory T Mr CIV USA IMCOM
> Sent: Wednesday, June 03, 2009 2:55 PM
> To: xxxxxxxxxxxxxxxx
> Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> To all,
>
> I added trusted sites to every machine in my organization through
> GPO. Now,
> no one is able to scroll down the list of trusted sites in the
> 'Security
> Tab" in Tools > Internet Options. Is there a fix for this? I have been
> searching the web for weeks and have not found anything that works.
>
> Thanks
>
> Gregory T Maxwell
> System Administrator
> Huachuca DOIM
> Fort huachuca, AZ 85613
> (520)533-2393
>
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
>
| | | |
| gtmaxwell
Posts:25
| | 06/03/2009 9:59 PM |
| Classification: UNCLASSIFIED
Caveats: NONE
I'm using Computer Config., IE Maintenance is 'not config' and by default
its security setting is 'medium'. I have looked at all possibilities and it
frustrates me that I can't figure out the reason behind it.
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Thomas Marantz
Sent: Wednesday, June 03, 2009 1:11 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
This is possible through regular GPO, but Preferences can be nice...
You are using GPO IE Maintenance for these sites?
I would guess you have something locked down in 'User
configuration'-'administrative templates' - 'windows components' - 'Internet
explorer' - 'internet control panel'...
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T Mr
CIV USA IMCOM
Sent: Wednesday, June 03, 2009 11:55 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| gtmaxwell
Posts:25
| | 06/03/2009 10:06 PM |
| Classification: UNCLASSIFIED
Caveats: NONE
Jaime,
Our users complain about everything. I guess they don't trust that I have
added their site. I'm just trying to please everyone and stop all the calls
and the attacks on me (GPO Guy) in meetings. Thanks for the help
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie
Sent: Wednesday, June 03, 2009 1:31 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
So, are users upset simply because they can't scroll the list or because
they can't modify it?
If you're providing a mandatory list through Group Policy, then I guess I'm
confused as to why they need to be able to see it. They'll know whether or
not a site is trusted by simply looking in the lower right-hand corner of
the IE browser.
Joe is correct in that there is no way to scroll that list if you're using
the Administrative Template policies to do zone mapping. You can also set
zone assignments in IE Maintenance Policy but it is kind of messy and not
nearly as granular. If users have to be able to edit that list, then Group
Policy Preferences (or a script) is the really the only way to go as Joe
already mentioned. Just keep in mind you'll have add them as direct registry
entries if you decide to go that route. Here is a good link that describes
all the security zone registry settings, if you're interested:
http://support.microsoft.com/default.aspx?kbid=182569
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Joe Pochedley
Sent: Wednesday, June 03, 2009 2:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
If you're using a standard GPO, then the ability to change items within the
trusted sites will be locked out. Why this also keeps people from at least
scrolling through the list is beyond me, but it's probably simply due to the
fact that _all_ controls within the window are disabled by the GPO being in
place.
If you want people to be able to add / remove sites from those you specify,
then the recommended course of action is to use the new Group Policy
Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T Mr
CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Confidentiality Warning: This message and any attachments are intended only
for the use of the intended recipient(s), are confidential, and may be
privileged.
If you are not the intended recipient, you are hereby notified that any
review, retransmission, conversion to hard copy, copying, circulation or
other use of all or any portion of this message and any attachments is
strictly prohibited. If you are not the intended recipient, please notify
the sender immediately by return e-mail, and delete this message and any
attachments from your system.
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| JamieNelson
Posts:166
| | 06/03/2009 10:58 PM |
| Well, like I said just tell them to browse to their site and make sure
it comes up in the "Trusted Sites" zone in the lower right-hand corner.
Either that or they can decipher it themselves from the registry. 
Of course, then they'll just find something else to complain about,
right?
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 4:02 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
Jaime,
Our users complain about everything. I guess they don't trust that I
have
added their site. I'm just trying to please everyone and stop all the
calls
and the attacks on me (GPO Guy) in meetings. Thanks for the help
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie
Sent: Wednesday, June 03, 2009 1:31 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
So, are users upset simply because they can't scroll the list or because
they can't modify it?
If you're providing a mandatory list through Group Policy, then I guess
I'm
confused as to why they need to be able to see it. They'll know whether
or
not a site is trusted by simply looking in the lower right-hand corner
of
the IE browser.
Joe is correct in that there is no way to scroll that list if you're
using
the Administrative Template policies to do zone mapping. You can also
set
zone assignments in IE Maintenance Policy but it is kind of messy and
not
nearly as granular. If users have to be able to edit that list, then
Group
Policy Preferences (or a script) is the really the only way to go as Joe
already mentioned. Just keep in mind you'll have add them as direct
registry
entries if you decide to go that route. Here is a good link that
describes
all the security zone registry settings, if you're interested:
http://support.microsoft.com/default.aspx?kbid=182569
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Joe Pochedley
Sent: Wednesday, June 03, 2009 2:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
If you're using a standard GPO, then the ability to change items within
the
trusted sites will be locked out. Why this also keeps people from at
least
scrolling through the list is beyond me, but it's probably simply due to
the
fact that _all_ controls within the window are disabled by the GPO being
in
place.
If you want people to be able to add / remove sites from those you
specify,
then the recommended course of action is to use the new Group Policy
Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr
CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Confidentiality Warning: This message and any attachments are intended
only
for the use of the intended recipient(s), are confidential, and may be
privileged.
If you are not the intended recipient, you are hereby notified that any
review, retransmission, conversion to hard copy, copying, circulation or
other use of all or any portion of this message and any attachments is
strictly prohibited. If you are not the intended recipient, please
notify
the sender immediately by return e-mail, and delete this message and any
attachments from your system.
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| jeromelcruz
Posts:120
| | 06/03/2009 11:05 PM |
| Copy the included sites into a text file. Then use the GPPE file copy extension and place a copy on their desktop. :-)
Jerry Cruz | Group Policies Product Manager | Windows Infrastructure Architecture | Boeing IT
-----Original Message-----
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Nelson, Jamie
Sent: Wednesday, June 03, 2009 2:57 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Well, like I said just tell them to browse to their site and make sure
it comes up in the "Trusted Sites" zone in the lower right-hand corner.
Either that or they can decipher it themselves from the registry.
Of course, then they'll just find something else to complain about,
right?
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr CIV USA IMCOM
Sent: Wednesday, June 03, 2009 4:02 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
Jaime,
Our users complain about everything. I guess they don't trust that I
have
added their site. I'm just trying to please everyone and stop all the
calls
and the attacks on me (GPO Guy) in meetings. Thanks for the help
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Nelson, Jamie
Sent: Wednesday, June 03, 2009 1:31 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
So, are users upset simply because they can't scroll the list or because
they can't modify it?
If you're providing a mandatory list through Group Policy, then I guess
I'm
confused as to why they need to be able to see it. They'll know whether
or
not a site is trusted by simply looking in the lower right-hand corner
of
the IE browser.
Joe is correct in that there is no way to scroll that list if you're
using
the Administrative Template policies to do zone mapping. You can also
set
zone assignments in IE Maintenance Policy but it is kind of messy and
not
nearly as granular. If users have to be able to edit that list, then
Group
Policy Preferences (or a script) is the really the only way to go as Joe
already mentioned. Just keep in mind you'll have add them as direct
registry
entries if you decide to go that route. Here is a good link that
describes
all the security zone registry settings, if you're interested:
http://support.microsoft.com/default.aspx?kbid=182569
Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
Corporation | Work: 405.552.8054 | http://www.dvn.com
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Joe Pochedley
Sent: Wednesday, June 03, 2009 2:28 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Gregory,
If you're using a standard GPO, then the ability to change items within
the
trusted sites will be locked out. Why this also keeps people from at
least
scrolling through the list is beyond me, but it's probably simply due to
the
fact that _all_ controls within the window are disabled by the GPO being
in
place.
If you want people to be able to add / remove sites from those you
specify,
then the recommended course of action is to use the new Group Policy
Preferences. (Google it for more info.)
Joe P
-----Original Message-----
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
Mr
CIV USA IMCOM
Sent: Wednesday, June 03, 2009 2:55 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
Classification: UNCLASSIFIED
Caveats: NONE
To all,
I added trusted sites to every machine in my organization through GPO.
Now,
no one is able to scroll down the list of trusted sites in the 'Security
Tab" in Tools > Internet Options. Is there a fix for this? I have been
searching the web for weeks and have not found anything that works.
Thanks
Gregory T Maxwell
System Administrator
Huachuca DOIM
Fort huachuca, AZ 85613
(520)533-2393
Classification: UNCLASSIFIED
Caveats: NONE
Confidentiality Warning: This message and any attachments are intended
only
for the use of the intended recipient(s), are confidential, and may be
privileged.
If you are not the intended recipient, you are hereby notified that any
review, retransmission, conversion to hard copy, copying, circulation or
other use of all or any portion of this message and any attachments is
strictly prohibited. If you are not the intended recipient, please
notify
the sender immediately by return e-mail, and delete this message and any
attachments from your system.
Classification: UNCLASSIFIED
Caveats: NONE
| | | |
| rickym61
Posts:18
| | 06/03/2009 11:20 PM |
| With the introduction of IE7, new security controls were introduced, so the
effect ending up being, you can't modify/scroll the trusted sites list,
there was this hotfix http://support.microsoft.com/kb/935786/ which was
meant to resolve the issue, but it didn't for us, so we raised this with PSS
and they effectively stated the above, they would not provide a workaround
either. I can get more details if required.
2009/6/3 Nelson, Jamie <xxxxxxxxxxxxxxxx>
> Well, like I said just tell them to browse to their site and make sure
> it comes up in the "Trusted Sites" zone in the lower right-hand corner.
> Either that or they can decipher it themselves from the registry.
>
> Of course, then they'll just find something else to complain about,
> right?
>
> Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
> Corporation | Work: 405.552.8054 | http://www.dvn.com
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx
> [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
> Mr CIV USA IMCOM
> Sent: Wednesday, June 03, 2009 4:02 PM
> To: xxxxxxxxxxxxxxxx
> Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> Jaime,
>
> Our users complain about everything. I guess they don't trust that I
> have
> added their site. I'm just trying to please everyone and stop all the
> calls
> and the attacks on me (GPO Guy) in meetings. Thanks for the help
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx
> [mailto:xxxxxxxxxxxxxxxx]
> On Behalf Of Nelson, Jamie
> Sent: Wednesday, June 03, 2009 1:31 PM
> To: xxxxxxxxxxxxxxxx
> Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Gregory,
>
> So, are users upset simply because they can't scroll the list or because
> they can't modify it?
>
> If you're providing a mandatory list through Group Policy, then I guess
> I'm
> confused as to why they need to be able to see it. They'll know whether
> or
> not a site is trusted by simply looking in the lower right-hand corner
> of
> the IE browser.
>
> Joe is correct in that there is no way to scroll that list if you're
> using
> the Administrative Template policies to do zone mapping. You can also
> set
> zone assignments in IE Maintenance Policy but it is kind of messy and
> not
> nearly as granular. If users have to be able to edit that list, then
> Group
> Policy Preferences (or a script) is the really the only way to go as Joe
> already mentioned. Just keep in mind you'll have add them as direct
> registry
> entries if you decide to go that route. Here is a good link that
> describes
> all the security zone registry settings, if you're interested:
>
> http://support.microsoft.com/default.aspx?kbid=182569
>
>
> Jamie Nelson | Lead Analyst | BI&T Desktop Management | Devon Energy
> Corporation | Work: 405.552.8054 | http://www.dvn.com
>
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx
> [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Joe Pochedley
> Sent: Wednesday, June 03, 2009 2:28 PM
> To: xxxxxxxxxxxxxxxx
> Subject: RE: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Gregory,
>
> If you're using a standard GPO, then the ability to change items within
> the
> trusted sites will be locked out. Why this also keeps people from at
> least
> scrolling through the list is beyond me, but it's probably simply due to
> the
> fact that _all_ controls within the window are disabled by the GPO being
> in
> place.
>
> If you want people to be able to add / remove sites from those you
> specify,
> then the recommended course of action is to use the new Group Policy
> Preferences. (Google it for more info.)
>
> Joe P
>
> -----Original Message-----
> From: xxxxxxxxxxxxxxxx
> [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Maxwell, Gregory T
> Mr
> CIV USA IMCOM
> Sent: Wednesday, June 03, 2009 2:55 PM
> To: xxxxxxxxxxxxxxxx
> Subject: [gptalk] Trusted Site Issues (UNCLASSIFIED)
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> To all,
>
> I added trusted sites to every machine in my organization through GPO.
> Now,
> no one is able to scroll down the list of trusted sites in the 'Security
> Tab" in Tools > Internet Options. Is there a fix for this? I have been
> searching the web for weeks and have not found anything that works.
>
> Thanks
>
> Gregory T Maxwell
> System Administrator
> Huachuca DOIM
> Fort huachuca, AZ 85613
> (520)533-2393
>
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
>
> Confidentiality Warning: This message and any attachments are intended
> only
> for the use of the intended recipient(s), are confidential, and may be
> privileged.
> If you are not the intended recipient, you are hereby notified that any
> review, retransmission, conversion to hard copy, copying, circulation or
> other use of all or any portion of this message and any attachments is
> strictly prohibited. If you are not the intended recipient, please
> notify
> the sender immediately by return e-mail, and delete this message and any
> attachments from your system.
> Classification: UNCLASSIFIED
> Caveats: NONE
>
>
>
| | | |
|
|