We have a Windows server 2012 R2 remote desktop farm, which we have applied a GPO to, to control site to zone assignments.
This was working fine up until recently, but just lately, we have found that this setting is not applying.
If I toggle ESC on, and then back off on the server I am on, the sites now show up in IE zone list for the currently logged in user. It does not however, seem to apply to all users. That list of sites will then follow them to other servers and that user will be ok moving forward.
We use user profile disks, so the users registry hive is not available on that server unless they are logged in, which might explain why it only occurs for the logged in test user.
EDIT: I can see the registry entries being created under HKCU ZoneMapKey and HKLM ZoneMap.
According to this article, IE should read settings from both of those locations, but they simply do not appear in the site list in IE control panel.
Is it possible that there has been an update for 2012 that has altered some ESC registry setting that causes us this issue?