Set IE security zones with GPO
To set the IE security zones using a GPO and still allow the user to add their own you need to set the defaults using registry keys.
You can find the registry key GPO area under User Configuration > Preferences > Windows Settings > Registry
Here’s an image of some of the entries we use
The last setting in the image above is the zone. You’ll need to know if you need to use Local Intranet Zone or Trusted zone. Here is a table to tell you which value is which zone
Value Setting
0 My Computer
1 Local Intranet Zone
2 Trusted sites Zone
3 Internet Zone
4 Restricted Sites Zone
More Stories
Quick PowerShell for the win
I'm always grabbing useful PowerShell commands or small scripts that I find useful. Here a couple from this week. I...
quick hit – Block personally owned devices in Intune with enrollment restrictions
https://twitter.com/SuneThomsenDK/status/1432759874014875651 Block personally owned devices in Intune with enrollment restrictions - OSDeploy | Sune Thomsen (osdsune.com)
Quick hit – Endpoint security and intune
endpoint and intune security features- tweet Endpoint & Security, The Curse of the Were-Applocker - Call4Cloud https://twitter.com/ooms_rudy/status/1432624423660621826
Blocking usb storage devices with intune
Moving from GPOs and SCCM to Intune and I've been searching for the best way to block usb storage devices...
Powershell reports for users with MFA setup in o365
Just a quick post about how to findout which users have setup MFA. Get-MsolUser -all | select DisplayName,UserPrincipalName,@{N="MFA Status"; E={...
Microsoft endpoint manager and windows updates
I'm working on getting our machines at work updated through Microsoft endpoint manager (intune) and reporting and slow updates have...