I have some sites I have assigned to security zones using site to zone assignment list. When the GPO is applied, assignments are done to the proper zones for all sites. But users are prevented from adding their own entries to trusted or intranet sites. Can I have it both ways?