none
IE10 gpo for security zones

    Question

  • Hi, I found out many gpo's don't work anymore for IE10. Is there a way to configure security zones for IE10 with GPO's? (not just adding sites to security zones with registry fixes)
    Tuesday, October 02, 2012 1:56 PM

Answers

  • Hi Yannara, yes I do. I found out it's best to configure the security zones for internet explorer 10 with registry edits with GPO.

    More info can be found here: http://www.grouppolicy.biz/2012/07/how-to-configuring-ie-site-zone-mapping-using-group-policy-without-locking-out-the-user/

    Example froim my gpo's:

    http://*.download.windowsupdate.com
    Winning GPO Internet Explorer 10 Settings
    Result: Success
    General
    Action Update
    Properties
    Hive HKEY_CURRENT_USER
    Key path Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\windowsupdate.com\*.download
    Value name http
    Value type REG_DWORD
    Value data 0x2 (2)

    • Marked as answer by DS_Kevin Wednesday, April 03, 2013 7:21 AM
    Wednesday, April 03, 2013 7:21 AM

All replies

  • Hi! I found today, that GPO with sites to zone list which inheritates fine to same user, works on a Windows 2008 R2 & IE9 machine, but not on Windows 2012 & IE10 machine. The sites are not recognized as trusted adresses. I even configured IE GPO using 2012´s gpmc, to make sure the latest admx files are used.

    Kevin, do you have latest admx for IE10 loaded to your active directory?

    Windows 2008 with IE9

    Windows 2012 with IE10

    Tuesday, April 02, 2013 3:38 PM
  • Hi Yannara, yes I do. I found out it's best to configure the security zones for internet explorer 10 with registry edits with GPO.

    More info can be found here: http://www.grouppolicy.biz/2012/07/how-to-configuring-ie-site-zone-mapping-using-group-policy-without-locking-out-the-user/

    Example froim my gpo's:

    http://*.download.windowsupdate.com
    Winning GPO Internet Explorer 10 Settings
    Result: Success
    General
    Action Update
    Properties
    Hive HKEY_CURRENT_USER
    Key path Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\windowsupdate.com\*.download
    Value name http
    Value type REG_DWORD
    Value data 0x2 (2)

    • Marked as answer by DS_Kevin Wednesday, April 03, 2013 7:21 AM
    Wednesday, April 03, 2013 7:21 AM
  • I wouldn´t mark your suggestion as an answer, but it´s your own thread, heh.

    It´s crazy to not having ability to edit direct group policy settings for Microsoft own browser! If the same behaviour exists on Win8/IE10, this is a serous bug.

    Wednesday, April 03, 2013 7:56 AM