G
Guest
Hello, in our organization I have trusted sites defined in the domain policy,
so the entire organization gets the same list. We allow active content in
the trusted site zone, and in the Internet zone we shut it off for some
departments, prompt for others. If they find they need something, they just
call us and we add it to trusted sites.
Anyway, a few days ago all of a sudden we start getting all these calls
because user's web sites aren't acting as they should. As it turns out,
these sites are now showing in the Internet zone.
We had previously been entering trusted sites in the following location in
group policy, because this was the only place it would take effect:
Computer configuration \ Administrative Templates \ Windows components \
Internet Explorer \ Internet Control Panel \ Security Page \ Site to Zone
Assignment List
I found that now if I add the site to the following location and then
refresh group policy, it will show in trusted sites:
User Configuration \ Administrative Templates \ Windows components \
Internet Explorer \ Internet Control Panel \ Security Page \ Site to Zone
Assignment List
A few other weird things: Now it distinguishes between www.microsoft.com and
microsoft.com. You have to put it in exactly where before you could just put
the base domain name.
Also strange is that SOME of the web sites that have not been entered in the
new place (under user configuration) do show in trusted sites. So this
problem doesn't appear to effect all sites.
I thought I read somewhere that there is a limit for trusted sites but I
can't seem to find that now. Also wondering if something went corrupt
somewhere?
I found where if you have a specific registry key enabled that it will cause
it to ignore the computer settings and only use the user settings (like what
appears to be happening to us somewhat), but I checked all pcs that run group
policy and none of us have that key enabled.
I also don't see any recent updates on workstations or servers that could
have caused this.
Any ideas? Thanks
so the entire organization gets the same list. We allow active content in
the trusted site zone, and in the Internet zone we shut it off for some
departments, prompt for others. If they find they need something, they just
call us and we add it to trusted sites.
Anyway, a few days ago all of a sudden we start getting all these calls
because user's web sites aren't acting as they should. As it turns out,
these sites are now showing in the Internet zone.
We had previously been entering trusted sites in the following location in
group policy, because this was the only place it would take effect:
Computer configuration \ Administrative Templates \ Windows components \
Internet Explorer \ Internet Control Panel \ Security Page \ Site to Zone
Assignment List
I found that now if I add the site to the following location and then
refresh group policy, it will show in trusted sites:
User Configuration \ Administrative Templates \ Windows components \
Internet Explorer \ Internet Control Panel \ Security Page \ Site to Zone
Assignment List
A few other weird things: Now it distinguishes between www.microsoft.com and
microsoft.com. You have to put it in exactly where before you could just put
the base domain name.
Also strange is that SOME of the web sites that have not been entered in the
new place (under user configuration) do show in trusted sites. So this
problem doesn't appear to effect all sites.
I thought I read somewhere that there is a limit for trusted sites but I
can't seem to find that now. Also wondering if something went corrupt
somewhere?
I found where if you have a specific registry key enabled that it will cause
it to ignore the computer settings and only use the user settings (like what
appears to be happening to us somewhat), but I checked all pcs that run group
policy and none of us have that key enabled.
I also don't see any recent updates on workstations or servers that could
have caused this.
Any ideas? Thanks