Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Basically, I would like to do .... this.....

.... via group policy. I have a largish number of machines to update, all at the same time, and 1 day to do it! Any help will be appreciated :)

share|improve this question
Try the script here.… – Zoredache Oct 29 '10 at 16:17

You can add the zone in question to the Trusted Sites or Intranet zone in IE via Group Policy or you can set UNC paths to be automatically included in the Intranet zone. Which would you prefer? Also, does the path show up as being in the Internet zone?


My preference would be to add the zones in question to the Trusted Sites zone as you may not want to automatically include all UNC paths in the Intranet zone.

share|improve this answer
This is the correct solution, but may not be optimal. Depending on what your users do, you may all sorts of sites in the trusted zone which end-users have set. Pushing a policy will overwrite their settings and block them from making changes. – duffbeer703 Oct 29 '10 at 14:03
If I'm not mistaken, adding sites to the various zones is an IE Preference and not a true GP setting, so the user is still able to modify the zones. This method is a quick and dirty method for putting the site into the proper zone en masse but doesn't stop the user from changing it once it's been "pushed". – joeqwerty Oct 29 '10 at 14:06
I looked through the group policy options, and I believe I was given the option to import the settings but that means it would be the version of IE on servers, IE ESC? Or are these settings elsewhere in group policy? – Mister IT Guru Oct 29 '10 at 14:25
It would import the settings from whatever version of IE is on the machine you're editing the GPO from. If that machine is running a different version of IE then the clients then you do need to be careful as the Security settings per zone have changed several times from one version of IE to the next. If the clients are running the same version of IE as the machine you're editing the GPO from then you shouldn't have any problems. – joeqwerty Oct 29 '10 at 14:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.