Home / server / Questions / 456470
Accepted
Matt Bear
Asked: 2012-12-09 21:18:59 +0800 CST

Add site to trusted sites through GPO

  • 772

I need to add a site to trusted sites on all computers in my domain. I can do it with the "site to zone assignment list", however when I do, it locks trusted sites on the client computer "this setting is managed by your administrator". What I need is a way to add the site, make it persistant, and not affects the users ability to add trusted sites of thier own. (It's a development enviroment, sites are created and tested regularly, they need that ability.)

group-policy

2 Answers

  1. Best Answer

    If you use logon scripts you could push a .reg file that has the trusted sites in there...that way you're not using the GPO to "take control".

    Something similar is described here: http://nefaria.com/2009/10/adding-trusted-sites-for-ie-via-the-registry/

    Also, if you don't want to replace what a user has already entered, there is a syntax to "append" data to a registry key...that way you can just add a global list but not wipe out individual additions already made by a user.

    Here is some registry editing syntax : http://msdn.microsoft.com/en-us/library/aa371168%28VS.85%29.aspx

    • 2

  2. Assuming you have WinNT6 clients (Vista / Win7 / Win8), use a Group Policy preference setting to add the REG entry. Preference settings do not restrict the user's UI. Job done.

    See Registry Extension TechNet Article for more info.

    • -1