none
GP to add sites to ie trusted sites zone without removing the current sites or disabling the option for the users to add more themselves

    Question

  • GP to add sites to ie trusted sites zone without removing the current sites or disabling the option for the users to add more themselves

    mostly reg settings, i tried this but doeskin seem to be working

    https://community.spiceworks.com/topic/326140-add-trusted-sites-via-gpo-but-still-allow-users-to-add-trusted-sites

    Sunday, June 26, 2016 9:33 AM

Answers

All replies

  • Hi,

    Thanks for your post.

    To achieve your goal, you could try to configure the setting Site to zone assignment list under the path:

    Computer Configuration --- Administrative Tools --- Windows Components --- Internet Explorer --- Internet Control Panel --- Security Page

    Enable it, click Show, add website as value name and 1, 2, 3 or 4 as value.

    1. Intranet zone
    2. Trusted Sites zone
    3. Internet zone
    4. Restricted Sites zone

    This will disable the add/remove buttons.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 27, 2016 3:08 AM
    Moderator
  • Hi Jay

    thank you but that wont help, i don't want to disable the button's, i want the able to add their own trusted sitees along with the ones i am adding though the GP

    this is done mostly over registry keys GP, i have tired the above link and it did not work

    just want to know if i am missing somethings or if someone else was able to achieve that somehow

    Monday, June 27, 2016 3:50 AM
  • Hi,

    If so, I suggest you run gpresult /h C:\gpresult.html and post it to us for further research.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, June 27, 2016 5:35 AM
    Moderator
  • thanks Jay

    unfortunately i cant send the file here since it will contain sensitive data, any workaround for this

    Monday, June 27, 2016 9:42 AM
  • Hi,
     
    Am 26.06.2016 um 11:33 schrieb MAHER0:
    > GP to add sites to ie trusted sites zone without removing the current
    > sites or disabling the option for the users to add more themselves
     
    Create the RegKeys directly with GPP Registry:
     
    if "*://*.myhome.dom" should be Intranet:
     
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
    Settings\ZoneMap\Domains\myhome.dom
    "*"=Dword=1
     
    if "https://www.myextranet.dom should be Trusted:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
    Settings\ZoneMap\Domains\myextranet.dom\www
    "https"=Dword=2
     
    .\ZoneMap\Domains\myextranet.dom\myextranet.dom\someserver.insubdomain
    "https"=Dword=2
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, June 27, 2016 7:23 PM