Internet Explorer Maintenance is not enforcing sites added to Zone
Dennis Clark
for each of the Zones (Internet, Local intranet, Trusted Sites, Restricted
Sites).
Computer Configuration\Adminsitrative Templates\Group Policy\Internet
Explorer Processing has been configured to be proccessed even if Group Policy
objects have not changed.
When a user modifies adds a new site to one of the Zones and logs off and
logsback on that new site he/she has created is NOT removed. However, I have
tested that when a user deletes a site from a zone that is being managed by
group policy that site is restored upon the next group policy refresh.
To workaround this problem I have added a logon script through the GPO
configuring IE to purge all Domain and Ranges registry keys:
Script Name: reg.exe
Script Parameters: delete
HKCU"\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Domains" /f
Script Name: reg.exe
Script Parameters: delete
HKCU"\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMap\Ranges" /f
Is there a better way to force through a GPO to purge sites added to zones
that are not being managed through Internet Explorer Maintenance.