Quantcast
Channel: Group Policy forum
Viewing all articles
Browse latest Browse all 19997

Add Trusted Sites with Internet Explorer Enhanced Security Configuration via GPO

$
0
0

Greetings!

I would like to know how to add trusted sites to Internet Explorer via GPO.  I've read that the GPO below is the preferred method.  However, a bug exists where sites added through this Group Policy are not added to the trusted sites list as intended for users with IE Enhanced Security Configuration enabled.

Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Site to Zone Assignment List

The URL below says the issue was fixed in Windows Server 2003 SP2, but it appears to be affecting Windows Server 2008 R2 SP1.

http://support.microsoft.com/kb/918915

Internet Explorer Maintenance was deprecated in IE 10 and is no longer an option.  Testing confirms a Group Policy Preferences registry item can be added for the following where foo.com is the site to be added.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\foo.com 


Value: *
Value type: REG_DWORD
Value data: 2
Base: Decimal

Is this the only method without disabling IE ESC?  Is there a hotfix to resolve the issue mentioned above for Windows Server 2008 R2 SP1?  Disabling the ability for users to add trusted sites is not required, but preferred.

Thanks,

NuxCase


Viewing all articles
Browse latest Browse all 19997

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>