GPO Path?



  • I'm at a loss here on this issue. I need to change/update material that's in a GPO for IE (I know). It's an old GPO.
    SpDuRF8.png
    As you can see, the path provided is \user config\policies\windows settings\IE maint\Security\Security Zones & content\etc.
    Unfortunately, the current GPO hash doesn't have that path, and everything I've read on Technet and elsewhere says that the old path is deprecated and there's a new path, but that path isn't in my GPO either!
    m9H4uyX.png
    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?



  • What is your domain functional level?



  • Are you using IEAK 10 by chance?



  • I'd just copy or update all of those settings in the IE Group Policy Preferences. It basically brings up a window like "Internet Options" that you can configure.



  • @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    Trusted sites are User Config > Policies > Admin templates > Windows Compontnets/Internet Explorer/Internet Control Panel/Security Page > Site to Zone Assignment List

    The number 2 is trusted sites. You can use *.domain.com and *.ip, and IP



  • @Grey said in GPO Path?:

    And where do I modify all of the trusted sites/zones and activex now?

    I think that's in the GPP area too.



  • @DustinB3403 said in GPO Path?:

    What is your domain functional level?

    @DustinB3403 said in GPO Path?:

    Are you using IEAK 10 by chance?

    I installed it last night when I saw your question. It's on my laptop. Nothing happens when I click on it so I'm unsure what's going on here. I'd be happier if it just gave me the ADM file.

    @Tim_G said in GPO Path?:

    @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    Trusted sites are User Config > Policies > Admin templates > Windows Compontnets/Internet Explorer/Internet Control Panel/Security Page > Site to Zone Assignment List

    The number 2 is trusted sites. You can use *.domain.com and *.ip, and IP

    CnSiWC3.png
    Every item in that tree is 'not configured' and I'm expecting that there should be items just as shown in my initial image. There should be some stuff for activex and a whole list of allowed/trusted sites and certs for many internal locations. This path doesn't have it, and the path listed (initial pic) doesn't exist.



  • @Grey said in GPO Path?:

    @DustinB3403 said in GPO Path?:

    What is your domain functional level?

    @DustinB3403 said in GPO Path?:

    Are you using IEAK 10 by chance?

    I installed it last night when I saw your question. It's on my laptop. Nothing happens when I click on it so I'm unsure what's going on here. I'd be happier if it just gave me the ADM file.

    @Tim_G said in GPO Path?:

    @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    Trusted sites are User Config > Policies > Admin templates > Windows Compontnets/Internet Explorer/Internet Control Panel/Security Page > Site to Zone Assignment List

    The number 2 is trusted sites. You can use *.domain.com and *.ip, and IP

    CnSiWC3.png
    Every item in that tree is 'not configured' and I'm expecting that there should be items just as shown in my initial image. There should be some stuff for activex and a whole list of allowed/trusted sites and certs for many internal locations. This path doesn't have it, and the path listed (initial pic) doesn't exist.

    You have "Trusted Sites Zone" selected. Select "Security Page", and edit the template named "Site to Zone Assignment List"



  • @Tim_G said in GPO Path?:

    @Grey said in GPO Path?:

    @DustinB3403 said in GPO Path?:

    What is your domain functional level?

    @DustinB3403 said in GPO Path?:

    Are you using IEAK 10 by chance?

    I installed it last night when I saw your question. It's on my laptop. Nothing happens when I click on it so I'm unsure what's going on here. I'd be happier if it just gave me the ADM file.

    @Tim_G said in GPO Path?:

    @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    Trusted sites are User Config > Policies > Admin templates > Windows Compontnets/Internet Explorer/Internet Control Panel/Security Page > Site to Zone Assignment List

    The number 2 is trusted sites. You can use *.domain.com and *.ip, and IP

    CnSiWC3.png
    Every item in that tree is 'not configured' and I'm expecting that there should be items just as shown in my initial image. There should be some stuff for activex and a whole list of allowed/trusted sites and certs for many internal locations. This path doesn't have it, and the path listed (initial pic) doesn't exist.

    You have "Trusted Sites Zone" selected. Select "Security Page", and edit the template named "Site to Zone Assignment List"

    That item is also not configured. My point was that every item that's a sub of security page is not configured.



  • I might be remembering wrong, but i think you need the version of IE you want to use GP on to be installed on the computer youre modifying GP on, or the right options never show up. So if you want to modify ie 10 GP you need ie 10 installed on the server you are using gpmc on. If you are trying to modify an existing gpo that has these site to zone assignments already you have to go throug your gpos to find it if you dont have a descriptive name
    Edit here is my Site to Zone assignment GPO(also its name)
    0_1487983358655_upload-d0ecb3d1-d673-44bd-9cc5-35a509486ac9



  • @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    I was answering the above question. Of course these will say not configured, because you haven't configured them yet.



  • @Tim_G said in GPO Path?:

    @Grey said in GPO Path?:

    So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

    I was answering the above question. Of course these will say not configured, because you haven't configured them yet.

    That's the thing though; there is configuration from the previous IT Team.
    CRwvU7j.png
    I should be able to edit that and I just can't. The path shown isn't there for me.



Looks like your connection to MangoLassi was lost, please wait while we try to reconnect.