none
Internet explorer_site to Zone Assignment setting_ IE options_trusted sites grayed out

    Question

  • We are using a GPO to control IE settings, we are using the site to zone assignment setting (user configuration only) for our trusted, restricted, intranet sites. While testing we see that those fields in IE are greyed out and do not allow the administrators to alter those settings on the fly. I went into the computer configuration for internet explorer and disabled the "security zones: do not allow users to add/delete sites" and "security zones: do not allow users to change policies" this did not fix the issue.

    We need to be able to modify the site list on the fly, what needs to be sett in the GPO to make these field no longer greyed out?


    Wednesday, February 3, 2016 6:01 PM

Answers

  • Hi,
     
    Am 03.02.2016 um 19:01 schrieb Jedi_Administrator:
    > We  need to be able to modify the site list on the fly
     
    Easy. Use a system/user that is not effected by the site to zone
    assignment list. End of story.
     
    If this list is controlled by GPO (policy), it is not a suggestion.
    It´s like being a little bit pregnant ... that doesn´t work.
     
    Deploy Zonesettings manually with GPP Registry as a preference to keep
    it editable and loose security doing so.
     
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
    Settings\ZoneMap\Domains
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Wednesday, February 3, 2016 6:46 PM
  • > Deploy Zonesettings manually with GPP Registry as a preference to keep
    > it editable and loose security doing so.
     
     
    Thursday, February 4, 2016 12:32 PM

All replies

  • Hi,
     
    Am 03.02.2016 um 19:01 schrieb Jedi_Administrator:
    > We  need to be able to modify the site list on the fly
     
    Easy. Use a system/user that is not effected by the site to zone
    assignment list. End of story.
     
    If this list is controlled by GPO (policy), it is not a suggestion.
    It´s like being a little bit pregnant ... that doesn´t work.
     
    Deploy Zonesettings manually with GPP Registry as a preference to keep
    it editable and loose security doing so.
     
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
    Settings\ZoneMap\Domains
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Wednesday, February 3, 2016 6:46 PM
  • > Deploy Zonesettings manually with GPP Registry as a preference to keep
    > it editable and loose security doing so.
     
     
    Thursday, February 4, 2016 12:32 PM