none
IE Trusted Sites

    Question

  • Is it possible to have GP set a trusted site for all users, yet still allow the users to add trusted sites of there own.
    Monday, August 03, 2015 8:15 PM

Answers

  • Hi,

    You can configure IE site mappings with Group Policy Registry Preferences. This will assign sites to IE Security Zones without interfering with the users ability to manage their own site lists.
     
    The policy setting is User Configuration>Preferences>Windows Settings>Registry
     
    The registry key location is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
     
    For example, if you want to add contoso.com as a trusted site, you need to create the registry below:
     
    Key Path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contoso.com
    Value Name: https
    Value Type: REG_DWORD
    Value Data: 2
     
    Hope this helps.

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    • Marked as answer by rlawrimore Tuesday, August 04, 2015 1:20 PM
    Tuesday, August 04, 2015 7:03 AM
    Moderator
  • > Is it possible to have GP set a trusted site for all users, yet still
    > allow the users to add trusted sites of there own.
     
    Yes:
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by rlawrimore Tuesday, August 04, 2015 1:20 PM
    Tuesday, August 04, 2015 9:23 AM

All replies

  • Hi,

    You can configure IE site mappings with Group Policy Registry Preferences. This will assign sites to IE Security Zones without interfering with the users ability to manage their own site lists.
     
    The policy setting is User Configuration>Preferences>Windows Settings>Registry
     
    The registry key location is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
     
    For example, if you want to add contoso.com as a trusted site, you need to create the registry below:
     
    Key Path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contoso.com
    Value Name: https
    Value Type: REG_DWORD
    Value Data: 2
     
    Hope this helps.

    Regards,

    Ethan Hua


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com

    • Marked as answer by rlawrimore Tuesday, August 04, 2015 1:20 PM
    Tuesday, August 04, 2015 7:03 AM
    Moderator
  • > Is it possible to have GP set a trusted site for all users, yet still
    > allow the users to add trusted sites of there own.
     
    Yes:
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    • Marked as answer by rlawrimore Tuesday, August 04, 2015 1:20 PM
    Tuesday, August 04, 2015 9:23 AM