[gptalk] Re: Site to Zone Assignment locks all zones
- From: Øyvind Sørbye <oyvind.sorbye@xxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Thu, 20 Nov 2008 22:19:47 +0100
True, I have followed the same advice. But even more frustrating is that IE
Maint. Configures _all_ settings, it's not possible to leave some settings
unconfigured.
I also looked into Group Policy Preferences (great tool btw.), but there
is no option there for assigning sites to zones. Maybe I should script the
sites-to-zone-assigning
>-----Original Message-----
>From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>On Behalf Of Darren Mar-Elia
>Sent: 20. november 2008 21:37
>To: gptalk@xxxxxxxxxxxxx
>Subject: [gptalk] Re: Site to Zone Assignment locks all zones
>
>Yes, unfortunately this behavior of IE Maintenance is irritating. What I
>usually recommend is to only edit these IE Maint. Settings from a
>pristine machine that has no other settings on it and is used
>specifically for this purpose. That prevents the policy from "sucking
>up" the settings that are in place on IE on your current profile.
>
>
>Darren
>
>-----Original Message-----
>From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>On Behalf Of Øyvind Sørbye
>Sent: Thursday, November 20, 2008 10:56 AM
>To: gptalk@xxxxxxxxxxxxx
>Subject: [gptalk] Re: Site to Zone Assignment locks all zones
>
>Hmm, Maintenance policy, i feared that :-) I have never properly
>understood that part of Group Policies. When opening "Security Zones and
>Content Ratings" it imports all IE-setting from my computer and presets
>_all_ settings for my users. But I don't want to configure all settings
>in all zones, I only wont to configure a few settings. Most of the
>settings will I leave to the users to choose. Maintenance policy is in
>some sense not a "true" policy, because you can't choose to _not_
>configure a value. Or is there a way to achieve this with Maintenance
>policy?
>
>>-----Original Message-----
>>From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>>On Behalf Of Darren Mar-Elia
>>Sent: 20. november 2008 16:19
>>To: gptalk@xxxxxxxxxxxxx
>>Subject: [gptalk] Re: Site to Zone Assignment locks all zones
>>
>>Øyvind-
>>Welcome to the list! In order to do this non-exclusively, you need to
>>use the Site mapping feature in IE Maintenance policy instead of the
>>one in Admin Templates. The locking feature is expected behavior for
>>this policy.
>>
>>Darren
>>
>>-----Original Message-----
>>From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>>On Behalf Of Øyvind Sørbye
>>Sent: Wednesday, November 19, 2008 11:27 PM
>>To: gptalk@xxxxxxxxxxxxx
>>Subject: [gptalk] Site to Zone Assignment locks all zones
>>
>>Hi everybody!
>>
>>I am setting up policies for IE7, and I want to assign some websites to
>>the Intranet Zone. I'm using the following Group Policy setting:
>>
>>User Configuration:
>>-Administrative Templates
>> -Windows Components/Internet Explorer/Internet Control Panel/Security
>>Page/Internet Zone
>> -Site to Zone Assignment List
>>
>>The websites are given the value of 1, and then they are added to the
>>intranet zone on the client computers. So far, so good. But when I use
>>this setting, _all_ zones in IE7 is locked down for the users. I want
>>my users to be able to add sites to the Trusted Sites zone, but this
>>"Site to Zone Assignment"-setting locks all zones.
>> So my question is: Is it possible to assign some sites to the
>>intranet zone, where the users still has the possibility to add their
>>own sites to the "Trusted Sites"-zone?
>>
>>
>>--
>>Øyvind Sørbye
>>
>>
>>***********************
>>You can unsubscribe from gptalk by sending email to
>>gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
>>by logging into the freelists.org Web interface. Archives for the list
>>are available at //www.freelists.org/archives/gptalk/
>>************************
>>
>>***********************
>>You can unsubscribe from gptalk by sending email to gptalk-
>>request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>>logging into the freelists.org Web interface. Archives for the list are
>>available at //www.freelists.org/archives/gptalk/
>>************************
>
>***********************
>You can unsubscribe from gptalk by sending email to gptalk-
>request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>logging into the freelists.org Web interface. Archives for the list are
>available at //www.freelists.org/archives/gptalk/
>************************
>
>***********************
>You can unsubscribe from gptalk by sending email to gptalk-
>request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>logging into the freelists.org Web interface. Archives for the list are
>available at //www.freelists.org/archives/gptalk/
>************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
