Users Unable to add/remove trusted sites
I created a GPO name "Add Trusted Sites" and added my trusted site in:
User Configuration\Administrati
in the SIte to Zone Assignment list and assisgned it a value of 2.
It was my understanding that even thought I added the Trusted site this way, it would not 'over-write' the users current trusted sites they might have on their workstation already and they should still have the ability to new trusted sites to this list. However, the complete opposite is true. The users do NOT have the ability any longer to add/remove trusted sites as they need to. So attempting to fix this, I disabled the following setting in:
computer configuration\Administrati
I DISABLED "Security Zones: Do not allow users to add/delete sites".
I linked this GPO to my workstation OU as well as the users OU but I still cannot add/remove any trusted sites. I have run GPUPDATE /FORCE multiple time and have left for lunch and came back and it still doesnt work.
Am I missing something? How do I give the users back the ability to add/remove their own trusted sites along with keeping the ones I assign to them via GPO?
User Configuration\Administrati
in the SIte to Zone Assignment list and assisgned it a value of 2.
It was my understanding that even thought I added the Trusted site this way, it would not 'over-write' the users current trusted sites they might have on their workstation already and they should still have the ability to new trusted sites to this list. However, the complete opposite is true. The users do NOT have the ability any longer to add/remove trusted sites as they need to. So attempting to fix this, I disabled the following setting in:
computer configuration\Administrati
I DISABLED "Security Zones: Do not allow users to add/delete sites".
I linked this GPO to my workstation OU as well as the users OU but I still cannot add/remove any trusted sites. I have run GPUPDATE /FORCE multiple time and have left for lunch and came back and it still doesnt work.
Am I missing something? How do I give the users back the ability to add/remove their own trusted sites along with keeping the ones I assign to them via GPO?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
TheGorby - so in other words, any imported trusted sites will overwrite any sites that a user might have on their computer once the GPO is applied via Active directory? The users can then ADD sites, but cannot delete any. Is that correct?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I tell you, you're damned if you do and damned if you dont. haha.
Thanks for the help. I'll most likely go with your method...of course a little trial and error/testing before I decided to push that out. Thanks alot.
Thanks for the help. I'll most likely go with your method...of course a little trial and error/testing before I decided to push that out. Thanks alot.
You might be better off adding it through a script. This is an old link, but it might get you started.
http://blogs.technet.com/b/heyscriptingguy/archive/2005/02/14/how-can-i-add-a-web-site-to-the-trusted-sites-zone.aspx