Re: Group policy seem broken in gpmc.msc, but not in the old policy editor

This is not a bug in GPMC. This is a "by design" with the way the IEM
policies work.

Whenever you edit the IE Maintenance policies through the group policy
editor, the IE Maintenance extension reads the IE state of the machine you
are editing the policy from and writes that to the policies. The thinking
was originally that there was a lot to setup in IE so you would set it up by
first configuring the machine you administrate from and then open the
policies which will then import the information from the administrative
machine first and then let you do further editing. Unfortunately, this
creates a destructive read everytime you open the policy in the editor.

What I would suggest you do is setup the policies with the trusted sites you
want to apply. Then instead of reopening the gpo with the gp editor for the
IE maintenance policy, you use gpmc to give you a report on the gpo. If you
need to edit the policy further make sure you first have all the sites set
on the machine you will administrate from before editing that policy.

Hopefully, this clarifies things for you.

--
Judith Herman
Microsoft Corporation
Server User Assistance - Group Policy
======================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================
"hallstein" <hallstein@xxxxxxxxxxxxxxxx> wrote in message
news:%23qHOXZoZFHA.2076@xxxxxxxxxxxxxxxxxxxxxxx
> 1. I created gpo under User Configuration\Windows Settings\Internet
> Explorer Maintenance\Security/Security Zones and Content Ratings\Security
> Zones and Privacy
>
> 2. I added a few sites to trusted sites (disable require https)
>
> The problem is now that when I go and edit this gpo using gpmc, the policy
> say that there are "No Sites in this zone" when I click trusted sites.
>
> I have a backup of this policy, but it was very strange that this
> happened. Anybody else experiencing this problem?


.

Relevant Pages

  • Re: Least User Priviledges for Network Administrators
    ... It makes sense to have a chain of command and approval policy to keep things ... the computer use policies, software purchasing policies, security ... upper management--both within the Network Technology group, ... driving the process of tightening down security. ...
    (microsoft.public.windowsxp.security_admin)
  • The New Economic Policy and Interethnic Relations in Malaysia
    ... The New Economic Policy and Interethnic Relations in Malaysia ... Malaysia?s New Economic Policy (NEP) was first announced in 1970 as the ... positive discrimination policies, on behalf of the ethnic Malays in particular ...
    (soc.culture.malaysia)
  • Re: Help needed with recipient policy
    ... Even when additional policies are applied to existing users, the old email addresses aren't automatically removed - they remain associated with the users. ... Bottom line, the default policy should remain, and for the users that require a different primary email address - create another policy with a higher priority than the default, and apply it to just those users by keying on a field in the user properties. ... Security groups can also be used in this way - one could apply a policy to a security group; as you make users members of that group they become subject to the policy that applies to that group and receive the corresponding email address. ... > to "Automatically update email addresses based on recipient policy" so ...
    (microsoft.public.windows.server.sbs)
  • Re: Help needed with recipient policy
    ... get an unintended result from policy, email can still be sent and received. ... Security groups can also be used in this way - one could apply a ... My only concern was that if I start playing around with the policies now ... to "Automatically update email addresses based on recipient policy" so ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy: multiple password policies in the same domain?
    ... Subject: Group Policy: multiple password policies in the same ... service accounts, and our company must be SAS70 type-II certified. ...
    (Focus-Microsoft)