How do I add a URL into a client’s Internet Explorer “Local Intranet Zone” using Windows Group Policy ?
Created on: Oct 15, 2009 3:35 PM by Nathan Krake - Last Modified: Oct 15, 2009 4:20 PM by Nathan Krake
Problem
I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply?
I can do it via the Internet Explorer Internet Options... GUI dialog and it works great, but I need to push this policy out to a number of PCs.
Solution
You need a policy that applies to Authenticated Users, and in that policy you need to set the following option:
- User configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page
- Enable the option Site to Zone Assignment List and then enter the site, and the zone you want to assign it to,
- eg.http://www.therightit.com.au and zone 1
- (1 = Intranet Zone, 2 = Trusted Sites Zone, 3 = Internet Zone, 4 = Restricted Sites Zone)
Nathan Krake
says:
Here is an example of such a script..
===Script Start===
Option Explicit
Dim oShell Set oShell =
WScript.CreateObject("WScript.Shell")
' http://support.microsoft.com/kb/182569
Dim sSite, sDValue, sZone, sKey, sZonesPath, aKeys, aKey
sZonesPath="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
sSite=0
sDvalue=1
sZone=2
' create key
aKeys = array( _
array(sZonesPath & "\internet-zone.example.org\","","2"), _
array(sZonesPath & "\intranet-zone.example.org\","","1") _
)
For Each aKey in aKeys
' create key for sSite
oShell.RegWrite akey(sSite), akey(sDvalue)
' add * dword under the site's key and set the sonze
sKey=akey(sSite) & "*"
oShell.RegWrite sKey, akey(sZone), "REG_DWORD"
Next
===Script End===
From my limited knowlege on scripts, it appears that you would replace the internet-zone.example.org with the URL in question and then specify the zone.. 1, 2 etc
Keep in mind that using this policy prevents the user from adding URLS to zones on their own. Perhaps you may want that in some environments, but if you just want to add something to a zone without removing the users ability to add things themselves you'll probably need to use a script.