You can use the Group Policy Management Console to confirm that your GP and ITS settings are being applied. You may have another ENFORCED GP on the Servers OU which is overriding your default GP. This could be the case especially if you've tried to lockdown your servers via MS's TS Lockdown recommendations.
It sounds like you may have already examined this possiblity. JMB Murda Mcloud wrote: > Hi Daniel-Liam's suggestion looks good. > Just a question though-what type of box(2003 or Xp) did you set the > original policy on? > I know that for some of the IE settings it basically 'copies' what > you have on the machine you are setting the policy from but I'm not > sure if this is the case with the Zones. Just wondering if this could > be a factor here. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Schmidt > Sent: Wednesday, January 24, 2007 8:54 AM > To: [email protected] > Subject: IE security zone assignment on 2003 terminal server > > I am trying to assign a website to the Trusted Sites zone with Group > Policy > -> User Configuration -> Administrative Templates -> Windows > Components > -> -> > Internet Explorer -> Internet Control Panel -> Security Page -> Site > to Zone Assignment List. > > When the domain user logs into a domain member XP Professional > system, the setting is propagated as intended. > > When he logs into a Windows 2003 member server, either locally or via > Terminal Server session, the setting is ignored and the site remains > in the Internet Zone. > > This is the case whether or not Internet Explorer Enhanced Security > Configuration is installed. > > If I run a Group Policy Results query for that user/server > combination, the policy appears to be getting applied, although it > appears in the "Extra Registry Settings" section. I updated the adm > files for that GPO to the 2003 SP1 versions in hopes of getting > policy labels, but to no avail. > However, running a Group Policy Results query for that user/XP Pro > system, where the policy works, also places it in the "Extra Registry > Settings" > section, so I doubt that's related. > > Does anyone have any suggestions for me? Thanks in advance. > > Daniel Schmidt > [EMAIL PROTECTED]
