Re: IE Intranet Sites

Dear Super,

Thanks for posting back.

After enabling "Preference mode", we can define all the settings under the
Internet Explore Maintenance, like Brower User Interface, URLs, Security
etc. In other words, the "Preference mode" will take effect on all settings
under the Internet Explore Maintenance.

We can simply import the current security zone settings in the Security
option to designate the Local Intranet Sites. Please note it's not allowed
to designate these settings separately, so we have to import all the
current security zone settings.

I hope this helps.

Thanks and have a good day.

Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
--->From: "super1" <Superbrown1@xxxxxxxxxxxxx>
--->References: <BA1CE8BF-EFD8-469C-B9F1-A4DB94EE824F@xxxxxxxxxxxxx>
<MuoGcipVIHA.360@xxxxxxxxxxxxxxxxxxxxxx>
--->In-Reply-To: <MuoGcipVIHA.360@xxxxxxxxxxxxxxxxxxxxxx>
--->Subject: Re: IE Intranet Sites
--->Date: Mon, 14 Jan 2008 09:16:10 -0700
--->Lines: 145
--->Message-ID: <7A949C04-8B2F-44E3-BFDD-20AF9A4BC685@xxxxxxxxxxxxx>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> format=flowed;
---> charset="iso-8859-1";
---> reply-type=original
--->Content-Transfer-Encoding: 7bit
--->X-Priority: 3
--->X-MSMail-Priority: Normal
--->X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545
--->X-MS-CommunityGroup-PostID: {7A949C04-8B2F-44E3-BFDD-20AF9A4BC685}
--->X-MS-CommunityGroup-ThreadID: BA1CE8BF-EFD8-469C-B9F1-A4DB94EE824F
--->X-MS-CommunityGroup-ParentID: F960A217-49B0-44CA-AC0F-38FC12CD50A5
--->Newsgroups: microsoft.public.windows.group_policy
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.group_policy:8476
--->NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
--->X-Tomcat-NG: microsoft.public.windows.group_policy
--->
--->I have seen the preference mode setting, but enabling that only adds an
--->Advanced folder under Internet Explorer Maintenance. That advanced
folder
--->does not have any setting related to the intranet sites setting.
--->
--->If I import settings from my machine in Windows settings, it still
fills the
--->GPO with settings I don't want to disturb at all.
--->If I add the URLs in administrative templates, it still clears out any
other
--->setting the user has and stops them from adding other sites.
--->
--->Am I missing some functionality of the preference mode?
--->
--->Thanks
--->
--->
--->
--->"Morgan che(MSFT)" <v-morche@xxxxxxxxxxxxxxxxxxxx> wrote in message
--->news:MuoGcipVIHA.360@xxxxxxxxxxxxxxxxxxxxxxxxx
--->> Dear Super,
--->>
--->> Thanks for posting here.
--->>
--->> After view this post, I understand that you want to add URL to the
domain
--->> users Local Intranet Sites setting without disturbing any URLs the
domain
--->> users already added. If there is any misunderstanding, please advise
me.
--->>
--->> Based on this demand, I would like to recommend to apply Preference
mode
--->> for the IE related Group Policy. The Preference mode does not allow
--->> network
--->> administrators to define the preferred IE settings, but also does it
allow
--->> the customers themselves redefine them. Please refer to the following
--->> information:
--->>
--->> More information:
--->> ==================
--->>
--->> The Internet Explorer Maintenance settings can be set in two modes:
policy
--->> mode (to enable by Computer Configuration\Administrative
--->> Templates\System\Group Policy\Internet Explorer Maintenance policy
--->> processing) or preference mode(to enable by right-clicking Internet
--->> Explorer Maintenance).
--->>
--->> Like all registry-based Group Policy settings, Internet Explorer
--->> Maintenance policy mode settings reapply only when the GPO changes.
Unlike
--->> most registry-based Group Policy settings, configuring an Internet
--->> Explorer
--->> Maintenance setting does not prevent the user from changing that
setting.
--->>
--->> The policy mode is enforced and automatically resets any settings
users
--->> might change (if they have the appropriate permissions) when Group
Policy
--->> is applied.
--->>
--->>
--->> Preference mode sets initial default values that the user can change,
--->> subject to other Group Policy settings that affect the user. The
--->> preference
--->> settings are only applied again when the administrator makes changes
to
--->> the
--->> preference settings. To allow users to change these preferences, they
must
--->> be able to access Internet Options on the Tools menu. We allow users
--->> access
--->> by configuring settings in the Group Policy Object Editor under
Computer
--->> (or User) Configuration\Administrative Templates\Windows
--->> Components\Internet Explorer.
--->>
--->> Please note we cannot use policy and preference modes together in a
single
--->> GPO. If we need both modes, we must use two separate GPOs. For the
more
--->> information about it, please refer to:
--->>
--->>
http://technet2.microsoft.com/windowsserver/en/library/6dcc3ce3-667d-44fb-97
--->> 2b-799ac1f26bcd1033.mspx?mfr=true
--->>
--->> Please note it's strongly recommended to test it in a testing
environment
--->> before putting it into production environment.
--->>
--->> I hope this helps. If anything is unclear, please feel free to post
back.
--->>
--->> Thanks.
--->>
--->> Sincerely
--->> Morgan Che
--->> Microsoft Online Support
--->> Microsoft Global Technical Support Center
--->>
--->> Get Secure! - www.microsoft.com/security
--->> =====================================================
--->> When responding to posts, please "Reply to Group" via your newsreader
so
--->> that others may learn and benefit from your issue.
--->> =====================================================
--->> This posting is provided "AS IS" with no warranties, and confers no
--->> rights.
--->>
--->>
--->> --------------------
--->> --->From: "super1" <Superbrown1@xxxxxxxxxxxxx>
--->> --->Subject: IE Intranet Sites
--->> --->Date: Fri, 11 Jan 2008 13:03:52 -0700
--->> --->Lines: 18
--->> --->Message-ID: <BA1CE8BF-EFD8-469C-B9F1-A4DB94EE824F@xxxxxxxxxxxxx>
--->> --->MIME-Version: 1.0
--->> --->Content-Type: text/plain;
--->> ---> format=flowed;
--->> ---> charset="iso-8859-1";
--->> ---> reply-type=original
--->> --->Content-Transfer-Encoding: 7bit
--->> --->X-Priority: 3
--->> --->X-MSMail-Priority: Normal
--->> --->X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
--->> --->X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16545
--->> --->X-MS-CommunityGroup-MessageCategory:
--->> {E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
--->> --->X-MS-CommunityGroup-PostID: {BA1CE8BF-EFD8-469C-B9F1-A4DB94EE824F}
--->> --->Newsgroups: microsoft.public.windows.group_policy
--->> --->Path: TK2MSFTNGHUB02.phx.gbl
--->> --->Xref: TK2MSFTNGHUB02.phx.gbl
--->> microsoft.public.windows.group_policy:8442
--->> --->NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
--->> --->X-Tomcat-NG: microsoft.public.windows.group_policy
--->> --->
--->> --->I am trying to add a URL to the domain users Local Intranet Sites
--->> setting.
--->> --->I want to add this url without distrubing any urls they have
already
--->> added,
--->> --->and let them add some in the future.
--->> --->
--->> --->If I set the poilicy here (User Configuration -> Administrative
--->> Templates ->
--->> --->Windows Components -> Internet Explorer -> Internet Control Panel
->
--->> --->Security Page -> Site to Zone Assignment List) the user can't
make
--->> any
--->> --->changes.
--->> --->
--->> --->If I set the policy here (User Configuration, Windows Settings,
--->> Internet
--->> --->Explorer Maintenance, Security, Security Zones and Content
Ratings) it
--->> --->imports all kinds of settings. I only want to add the URL, not
--->> configure
--->> --->everything about their browsers security.
--->> --->
--->> --->
--->> --->How can I do this?
--->> --->Thanks
--->> --->
--->> --->
--->>
--->
--->

.

Relevant Pages

  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)
  • Re: Problem with NT4 domain trusting W2003 domain
    ... | implemented the settings you suggested in the "default domain controller ... | GPO" and not in the local GPO, and verified with GPMC that they are ... |> suspect there are some settings in security options caused this problem, ...
    (microsoft.public.windows.server.migration)
  • Re: Open file - security warning....How do I disable it?
    ... You possibly should move this over to the IE security newsgroup, ... IE internet options have both all user and per user settings. ... We are in the process of migrating to windows server 2003. ... and then remove security inside the network. ...
    (microsoft.public.security)
Loading