I have a two server domain. Our primary AD server and a Remote Desktop Services Server. I have about 12 users logging into the RDP server and it was necessary to tweak some standard settings for Internet Explorer so it would work correctly with some of our web sites. I easily found the settings and adjusted them in the Trusted Zone. When I tried to use the ZoneList to set a couple trusted sites, I got the expected issue of the users being locked out of changing their Zone lists manually. I knew this happened in the past, but was hoping that Microsoft had adjusted this setting so it would be more useful. When this didn't work, I tried the Security Zones & Content Rating under User Configuration\Policies\Windows Settings\Internet Explorer Maintenance\Security\. However, for this setting to take hold, I had to do a reset on each user including their personal settings which was unacceptable because of some bug or something with it being an RDP server. (http://social.technet.microsoft.com/Forums/en-US/winserverTS/thread/71f666f7-d435-473c-ab1a-f5b17d6923be/) I fell back on using the GPO to stamp settings into the registry under HKCU\Software\Microsoft\Windows\CurrentVesion\Internet Settings\ZoneMap\...domain.... While this is a functional solution that I've used in the past with 2003 servers, it seems there should be a better method. Can anyone tell me a better/more correct way to push trusted sites into the zonemap?
Thanks,
Jeffery Smith