We use gp to set IE security zones. Recently I changed some of these entries
and added new ones. Users with roaming profiles appear to have an overlay of
the old settings and the new in their HCU Zonemap entries, thus sites that
have been moved from 'trusted' to 'intranet' are still listed in the
'trusted' whilst also now appearing in the 'intranet' zone; being in
'trusted' appears to shortcut the intranet setting and prevents integrated
authentication. Non-roaming users with fresh profiles appear to be OK and
just get the new settings (as you'd expect).
How can I force the old settings to be removed when the new ones are applied?
|