GPO not apply on the client

[ljCharlie]

I'm trying to add a site to the Local Intranet in GPO and it's not working. Trusted Sites Settings of Internet Explorer Security Zones and Content Ratings GPO Settings does not apply on the client. I'm working with Windows 2003 Server Enterprise and Windows XP as client. I have tested, anything else in the GPO works except the Trusted Sites Settings of Internet Explorer Security Zones and Content Ratings does not working.

Any help is greatly appreciated!

ljCharlie

 

[Jpoandl]

Use GPRESULT to see the policy settings on the client. This might show you where the problem is...



Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[ljCharlie]

Many thanks for your suggestion. I think I found out the problem is; however, I still need your help. When I specified the sitee in the GPO, I wrote: \\comp_name.domainName.local\User Profiles$ however, when I click add, the site showed up as file:\\comp_name.domainName.local and that is it. This is why it's not working, I bet. How do I get the site to show as file:\\comp_name.domainName.local\User Profiles$ ? It's missing the User Profiles$ folder and that is why it's not working.

ljCharlie

 

[ljCharlie]

Nope! That is not it either. I tried adding the site from the client computer when the user logged in wihtout the User Profiles$ at the end and it's working fine. I used Resultant Set of Policy on the client to view the GP and it's there. Here's where I check on the RSoP MMC.

User Configuration/Internet Explorer Maintenance/Security/Security Zones and Content Ratings/Security and Privacy Settings tab/ and click on View Settings/Security tab/click on Local Intranet then click on Sites/then click on Advance and in the Web Sites list box, I can see that the server UNC path I added in is there.

Is this all I need? What else is wrong? Can anyone point me to the right direction?

Any help is grateful!

ljCharlie

 

[calidrake]

I am having the same problem when I try to push out the "Trusted Sites" list. I did see that in order to push Group Policy out to clients that do not have Enhanced Security enabled that you have to disable it on the server that you edit the policy from. However, for me it is disabled and it still doesn't work. Also, when I look at the resultant settings in Group Policy Manager, there are no sites listed. It's very annoying because everything seems to be setup correctly, and there are no errors, but the list just doesn't show up.