MDT 2010 - Unattend.xml Trusted sites does not populate the ZoneMap\Domains in Registry to install Win7x64sp1
When using Microsoft Deployment Toolkit one can add trusted sites to the unattend.xml (see below). This adds this to the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Unattend and not to the
Can we find out about this behavior – not sure why this would not add to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
- <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="***********" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<TrustedSites>http:\\site.com; http:\\aww.site.com; http:\\aww.site.com; http:\\site.com; http:\\aww.site</TrustedSites>
- Edited by kkra461 Friday, October 28, 2011 4:16 PM
The GPO process is not matured here in the sence of the committee's that would oversee and manage the what, when,where and how. So I plan on doing these at the machine level until such time that would pass to such a planning process. So unfortunately my question would still stand. To be honest your reply is the most common one that is out there in the bloggest world on such question. The fact that it gets written to the regestry is good but I do not understand the location that it gets written to and if there is a solution. I can write scripts to load these after the fact, but why have a location in the Windows System Image Manger to enter in the first place????
I still use a script to write to the registry. This and other configurations have finally push our organization to pursue using GPO. We are proceding cautiously. My desktop team wanted to see the sites within the users profile and want to be able to add on the fly. The issue still stands as to why it is included in MDT and it does not do what is advertised.
Good luck with that.
Here is another thread along the same lines:
here is the basis of what I use. Hope this helps.
The Security zones are stored in the registry path [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
Another way you can accomplish this is by adding the trusted site on your local computer and then
go to the registry and “export” that key and save it as .reg file. Then just run the .reg file.