Can't make any modifications to the security zones

[Guest]

I seem to have broken my ability to use security zones throughout my domain.

On Windows XP machines, I can't add or remove sites from the trusted or
intranet zones, and on 2003 server, I can't add any sites to the trusted
zone. I get no errors or any other indication that it hasn't succeeded, it
simply doesn't take my change. If I remove a site from the trusted zone,
click OK, and then go back into the site list, the site I just removed is
back.

This problem happens domain-wide. We have a default domain profile which
everyone (including administrator accounts) starts out with, so the problem
may have mainfested itself there. However, I have no idea where to start
looking.

Any help is appreciated.

 

[Rob Parsons]

use gpedit.msc on the 2003 server to edit your group policy
settings(profile) for the domain. Reboot clients for the changes to take
effect. There are options to password protect changes to the security zones
at the user level.

 

[Guest]

I figured out my problem. I had a GPO at the top of the domain that had
policy settings defining which sites were allowed into specific zones.

The behavior exhibited by Internet Explorer when this policy is set is
unusual. When I set a policy defining a setting in Windows, I expect to see
the setting in the application either grayed out or completely hidden. I
don't expect to be able to modify the setting and then have the application
silently fail. Is there a reason for this, or is this a bug?

 

[Guest]

Well, I answered my own question again. There are seperate group policy
settings for actually defining sites and defining whether or not users can
modify the sites.