[gptalk] Re: Site to Zone Assignment locks all zones
- From: Rickym61 <rickym61@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Thu, 20 Nov 2008 21:59:19 +0000
hi all,
Just to add to the original question, we raised this with MS PSS and they
advised it was one of the new security features with IE7 and there was no
way around it, its fine with IE6. We moved to this new way for trusted sites
as the old one was very troublesome but then this occurred, so we are living
with it.
2008/11/20 Darren Mar-Elia <darren@xxxxxxxxxx>
> Or by the same token, it would be very simple to use GP Preferences
> registry extensions to do this. Frankly, if you have GP Prefs. in your
> environment, I don't see a lot of value in continuing to use custom ADMs
> when GP Prefs. is simpler and quicker.
>
>
>
> Darren
>
>
>
> *From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
> Behalf Of *Alan & Margaret
> *Sent:* Thursday, November 20, 2008 1:27 PM
> *To:* gptalk@xxxxxxxxxxxxx
>
> *Subject:* [gptalk] Re: Site to Zone Assignment locks all zones
>
>
>
> Hi,
>
>
>
> The alternative is to write your own ADM file that creates the registry
> keys that you want. They all sit under
>
>
>
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\ZoneMap
>
>
>
> I have attached a sample file. You could set it up to either add specific
> sites or delete sites that you don't want users to add.
>
>
>
> (Note: I haven't actually tested that it works...)
>
>
>
> Alan Cuthbertson
>
>
>
>
>
> Policy Management Software (Now with ADMX and Preference support):-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
>
>
>
> ADM Template Editor(Now with ADMX support):-
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
>
>
>
> Policy Log Reporter – including Preference logging(Free)
>
> http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
>
>
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of Øyvind Sørbye
> Sent: Friday, 21 November 2008 5:56 AM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Re: Site to Zone Assignment locks all zones
>
>
>
> Hmm, Maintenance policy, i feared that :-) I have never properly understood
>
> that part of Group Policies. When opening "Security Zones and Content
>
> Ratings" it imports all IE-setting from my computer and presets _all_
>
> settings for my users. But I don't want to configure all settings in all
>
> zones, I only wont to configure a few settings. Most of the settings will I
>
> leave to the users to choose. Maintenance policy is in some sense not a
>
> "true" policy, because you can't choose to _not_ configure a value. Or is
>
> there a way to achieve this with Maintenance policy?
>
>
>
> >-----Original Message-----
>
> >From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>
> >On Behalf Of Darren Mar-Elia
>
> >Sent: 20. november 2008 16:19
>
> >To: gptalk@xxxxxxxxxxxxx
>
> >Subject: [gptalk] Re: Site to Zone Assignment locks all zones
>
> >
>
> >Øyvind-
>
> >Welcome to the list! In order to do this non-exclusively, you need to
>
> >use the Site mapping feature in IE Maintenance policy instead of the one
>
> >in Admin Templates. The locking feature is expected behavior for this
>
> >policy.
>
> >
>
> >Darren
>
> >
>
> >-----Original Message-----
>
> >From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
>
> >On Behalf Of Øyvind Sørbye
>
> >Sent: Wednesday, November 19, 2008 11:27 PM
>
> >To: gptalk@xxxxxxxxxxxxx
>
> >Subject: [gptalk] Site to Zone Assignment locks all zones
>
> >
>
> >Hi everybody!
>
> >
>
> >I am setting up policies for IE7, and I want to assign some websites to
>
> >the Intranet Zone. I'm using the following Group Policy setting:
>
> >
>
> >User Configuration:
>
> >-Administrative Templates
>
> > -Windows Components/Internet Explorer/Internet Control Panel/Security
>
> >Page/Internet Zone
>
> > -Site to Zone Assignment List
>
> >
>
> >The websites are given the value of 1, and then they are added to the
>
> >intranet zone on the client computers. So far, so good. But when I use
>
> >this setting, _all_ zones in IE7 is locked down for the users. I want my
>
> >users to be able to add sites to the Trusted Sites zone, but this "Site
>
> >to Zone Assignment"-setting locks all zones.
>
> > So my question is: Is it possible to assign some sites to the intranet
>
> >zone, where the users still has the possibility to add their own sites
>
> >to the "Trusted Sites"-zone?
>
> >
>
> >
>
> >--
>
> >Øyvind Sørbye
>
> >
>
> >
>
> >***********************
>
> >You can unsubscribe from gptalk by sending email to
>
> >gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
>
> >by
>
> >logging into the freelists.org Web interface. Archives for the list are
>
> >available at //www.freelists.org/archives/gptalk/
>
> >************************
>
> >
>
> >***********************
>
> >You can unsubscribe from gptalk by sending email to gptalk-
>
> >request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
>
> >logging into the freelists.org Web interface. Archives for the list are
>
> >available at //www.freelists.org/archives/gptalk/
>
> >************************
>
>
>
> ***********************
>
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
>
> ************************
>
Other related posts:
