Home / server / Questions / 1068507
In Process
user3271408
Asked: 2021-07-03 08:58:43 +0800 CST

Group Policy Management about:security_mmc

  • 772

In Group Policy Management, when I click on an existing GPO, I get an Internet Explorer Enhanced Security Configuration messaged that "about:security_mmc.exe" is not a trusted site.

Error received when selecting a GPO

It happens every time I click a different GPO. I read to add this to the trusted site list, which I did. I confirmed it is in the policy when I do gpresult.

GPResult

But I'm still getting this message. Anything else I need to do so this doesn't keep popping up?

group-policy active-directory

2 Answers

  1. When you say you added it to trusted sites, did you add it within the GPO only or manually on the server itself? If you added it via GPO, it may take some time to replicate to that server.

    You can run rsop.msc to check your applied group policies.

    You can check IE trusted sites on the local server as well(settings)

    IESettings

    • 0

  2. As soon as you use Site to Zone Assignment List in a (computer) GPO: everything else is blocked including the built-in ones, and you cannot see the list.

    I have to do some test to pinpoint exactly where this comes from but long story short: prefer using (user-side) Zone mapping GPO that is simply adding registry entries.

    JJStellato's answer from this social TechNet post helped me figure it out. As well as the last reply from Alan Burchill.

    Microsoft - IE security zones registry entries for advanced users

    Microsoft - IE Enhanced Security Configuration

    • 0