It appears to me with XpSp2 you have the option to allow users to configure their own pop-up blocker settings, or prevent them from doing so. If you choose to populate the safe list, a user's list is deleted.
What I am looking to do is populate all computers in our domain with a default list of safe sites, such as the internal domain, but still allow users to add additional safe sites on their own.
So far the only way I see to do this via policy is to create a custom template that will create the registry keys for the default safe sites.
Has anyone encountered this situation already, and how did you choose to resolve it?
-Andy