Hi All,
Domain = Windows 2003. Clients = XPSP3. Internet Explorer = Version 8
We have a default user policy GPO, which is applied to all users and within this default user policy are IE settings, with some of them being managed under the 'Internet Explorer Maintenance' section. There is no security filtering on this GPO and is applied to Authenticated users. This has been setup and working for years.
I have now been asked to add a list of Local Intranet Sitesbut only for a specific set of users. These users should also still apply the default user policy. My plan was to create a new GPO, add just the Intranet sites and use Security filtering to apply to the specific group of users.
So, I created a new GPO and under the 'Internet Explorer Maintenance' section I added the local Intranet sites. Once I saved the GPO I noticed there was a lot of other info in this new GPO that I hadn't added. I also notice that if I open the Default users policy and make a change to the 'Internet Explorer Maintenance' section it merges the two GPO settings. I can only imagine it is when you click 'Modify Settings' it imports settings from the workstation into the GPO??
I can get it to work, but I have to be careful to make sure I remove the newly added Intranet sites from the Default Users GPO whenever I make a change, but this is messy and doesn't seem right to me.
I did have a quick look at doing it in the site to zone assingment setting (Administrative Tools - Windows Components - Internet Explorer - Internet Control Panel - Security Page) but this seemed to blank out all the other settings set by the Default user GPO (trusted sites etc)
There must be a better way? Please can someone explain the best way to achieve this.
Thanks in advance.