RE: GP settings for Trusted sites - don't see them in the individual users settings on IE?
- From: v-stezhu@xxxxxxxxxxxxxxxxxxxx (Steven Zhu [MSFT])
- Date: Mon, 15 May 2006 03:36:16 GMT
Hi,
Thanks for posting here.
From your post, my understanding on this issue is: the GP settings for IETrusted sites cannot apply to users. If I am off base, please feel free to
let me know.
According to my research, there is Internet Explorer Maintenance Extension
in Group Policy, which may help you set the trusted sites on the clients
via GPO. The related policy is "Security Zones and Content Ratings" which
can be located in Group Policy Editor from:
User Configuration\Windows Settings\Internet Explorer Maintenance\Security
For more information about Internet Explorer Maintenance Extension, please
refer to the following Web site:
Internet Explorer Maintenance Extension Technical Reference
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechR
ef/1f105ee4-b025-478c-a03e-77fcd91a64e4.mspx
Please double check the above technology article to make sure you have
correct steps for IE trusted site configuration.
If the issue persists, this problem occurs because the client does not
replace one of the two affected registry keys correctly. When you edit the
list of trusted Web sites in the Security Zones and Content Ratings GPO on
a domain controller, the settings that you configure are written to the
Seczones.inf file. When the client applies the GPO, it reads the
information in the Seczones.inf file and then updates the registry. The
changes affect two registry keys. The new settings replace the settings
that are contained in one registry key, but only adds (instead of replaces)
the new settings to the other registry key. The two registry keys that are
affected are:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains
To resolve this problem, please obtain the latest service pack for Windows
SBS 2003.
I hope the above information helps.
Have a nice day.
Best Regards,
Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================
.
- Prev by Date: RE: Remote Workplace
- Next by Date: RE: public folders snap-in is hanging mmc.exe
- Previous by thread: RE: Remote Workplace
- Next by thread: To cache or not to cache…
- Index(es):