RE: Troubleshooting Trusted security zones in internet explorer gpo



Hi,
I think this is down to how the IE policies are applied (Client Side
Extensions).
In any event I wouldn't do trusted (or any type) of web site this way. It is
too cumbersome to maintain. We use this GPO setting (it is under user and
computer config)

Administrative Templates\Windows Components\Internet Explorer\Internet
Control Panel\Security Page\Site to Zone Assignment List

For a trusted site enter the URL and give it a value of 2

Note that this GPO will override all existing trusted sites on the PC. It is
not cumulative

Cheers,

Irv

"Ahmedgtech" wrote:

Good Day

My enviroment is a windows 2003 with forest and domain functional
level windows 2003 , we have a GPO for applying bussiness favorites and
trusted security zone websites in the following location :


User Configuration > Internet Explorer Maintenance > URLs/Favorites
and Links


User Configuration > Internet Explorer Maintenance > Security/
Security Zones and Content Ratings > Trusted sites


The gpo is fully replicated to all sites , occationally , the gpo is
not appllied in some clients in different sites , when checking the
malfunctionning random clients in the GPMC , it reports the GPO is applied in
group policy results wizard for the malfunctionning clients , and the GPMC
reports that trusted security zone settings is applied in group policy
results wizard settings tap but the winning GPO is a different GPO which does
not have this settings configured at all . please advice how to troubleshoot
this frustrating problem given that all clients have a GC within their Lan
and no slow links.


Thanks for quick response and assistance in advance

.



Relevant Pages

  • Troubleshooting Trusted security zones in internet explorer gpo
    ... The gpo is fully replicated to all sites, occationally, the gpo is ... not appllied in some clients in different sites, ... reports that trusted security zone settings is applied in group policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: W2K3 GPO pushing IE settings to W2K...
    ... > We have a setup using a W2K3 AD server pushing the GPO out to a fleet ... > The problem is that not ~all~ the settings seem to be pushed. ... > and changed like I'd expect, reflecting what's in the GPO. ... The settings nor the site list appear on the clients. ...
    (microsoft.public.windows.server.setup)
  • Re: laptops connect at work but not at home?
    ... > btw, i've tried to copy one GPO to another OU and rename it, but then ... > other GPOs, rename it, and remove the DNS-related stuff. ... relates to Pri DNS Suffix and Append parent Suffix. ... DNS addresses on the clients IP properties are set ONLY to the internal DNS ...
    (microsoft.public.win2000.dns)
  • RE: GPOs dont work at all
    ... Are you sure you've linked your GPO to the domain? ... > editor to change gpo's. ... > Our domain consists of one server with SBS2003 Standard. ... In the domain there are three clients with XPSP2 and ...
    (microsoft.public.windows.server.sbs)
  • Re: Prompted to login again when switching to explorer view or ope
    ... intranet" I have tried on two different MOSS installations and one WSS ... It is not working on 7 different Vista Clients. ... would solve something similar with adding the site to their Trusted sites ... If I switch to explorer view I am prompted to login again. ...
    (microsoft.public.sharepoint.portalserver)

Quantcast