GPO and Internet Settings

Jonny Two Shoes

Expert Member
Joined
Nov 13, 2006
Messages
4,542
Reaction score
17
Location
Gauteng
Hi there,

Just wanted to make sure I'm doing this right as it is the first time :o

I would like to add default trusted sites as well as changes to settings for the trusted sites zones for all our PC's using group policy.

I create a new GPO on server 2008 using the GP Management Editor, link it to the Workstations OU where all our PC's reside, then in the GPO settings under User Configuration I update the Internet Explorer Maintenance with the sites I would like to add to the trusted sites zone.

Then also under User Configuration for Internet Options I add IE 5&6 and update the individual security settings of the zone as I would like them to be. I also add IE7 and do the same, I assume IE7 will affect users with IE8 as well.

Is all this correct?

Reason I ask is that my own PC is in the workstations OU where the GPO is linked. GPRESULT shows me that the GPO has been applied. But even after my PC restart those settings have not been changed on my PC.

What am I not understanding or missing? :o
 
hi Two Shoes.

1) get all your desktops on the same version of IE.
2) create a "TestOU" where you test your GPO's on one PC before rolling them out to rest of the desktops.
2) sometimes a GPO fails. if unsure, goto command prompt and do a "gpupdate /force" (on the test desktop) and then check event viewer if it loaded OK.
3) far as I remember there are more than a thousand GPO templates for IE7 & 8.

go here: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592

:-)
 
Make sure the Group Policy Object is Enforced as well (not sure about 2008, but it needed to be in 2003). Right click on the GPO to make sure it is enforced.

You can use SpecOps Gpupdate free edition to Gpupdate the entire network if the test box works fine:

http://www.specopssoft.com/products/specops-gpupdate
 
Top
Sign up to the MyBroadband newsletter
X