IE - Adding trusted site mapping to existing user profile.

[jlevans]

I am looking for a way to add one or more trusted and intranet sites via a GPO without overwritting any existing site definitions in the user profiles, and also leaving the user free to manage their sites going forward.

If I use the IE Maintenance section of the group policy to do this, the above criteria are partially met, although existing settings appear to be "masked" from view. However, I seem to be forced to also include all IE zone settings as read / modified from the consol I use to create the policy. Not what I want to do.

If I use the new XP SP2 adm template setting "“User settings / Administrative Templates / Windows Components / Internet Explorer /Internet Control Panel / Security Page / Site to Zone mapping" Then all existing trusted site info a user might have is lost, and the user is prevented from adding them back in.

Has anyone created an ADM file that would facilitate adding site to zone mappings without restricting the user, or adding in other unwanted configuraiton settings?

Thanks in advance

[jlevans]

I ended up creating an ADM template to add trusted sites. It isn't pretty, and has to be configured specifically for each situation, but it does meet the criteria of adding the site, not overwritting existing sites, and leaving the user free to manage trusted sites going forward. It can be used to map a site to any zone.

CLASS USER

CATEGORY "Site to Zone Assignment List"

POLICY "Add portail-connexim.intranet.bell.ca to list of Trusted sites"

KEYNAME "Software\Microsoft\Windows\CurrentVersion\Interne t Settings\ZoneMap\Domains\bell.ca\portail-connexim.intranet"

ACTIONLISTON
VALUENAME "*" VALUE NUMERIC 2
END ACTIONLISTON

ACTIONLISTOFF
VALUENAME "*" VALUE DELETE
END ACTIONLISTOFF

END POLICY

END CATEGORY


; 1= Intranet Zone 2= Trusted Sites Zone 3= Internet Zone 4= Restricted Sites Zone

[yurkie]

I was looking for this information for a while and was about to try creating custom adm for myself -but i tried one more google search with some magic words and found this site!

And i registered just to say thanks.

Well, maybe i start using this site and learning more from GPO:s as AD in general is one of my biggest fav. areas in IT industry.. . .