
Set IE security zones with GPO
To set the IE security zones using a GPO and still allow the user to add their own you need to set the defaults using registry keys.
You can find the registry key GPO area under User Configuration > Preferences > Windows Settings > Registry
Here’s an image of some of the entries we use

The last setting in the image above is the zone. You’ll need to know if you need to use Local Intranet Zone or Trusted zone. Here is a table to tell you which value is which zone
Value Setting
0 My Computer
1 Local Intranet Zone
2 Trusted sites Zone
3 Internet Zone
4 Restricted Sites Zone
More Stories
Micrsoft Defender for Endpoints
We use Microsoft Defender for endpoints on our physical workstations. I'm now looking at it for our servers. The servers...
Sync Active directory user data with SharePoint
If you want to sync standard common attributes from active directory to sharepoint. Its easy, AD sync to Azure AD...
Microsoft graph API to access sharepoint
Recently I've had to setup a few different app registration using Azure AD to access sharepoint sites. Once you get...
SQL upgrades
We have a few SQL servers that need to be upgraded before they go end of life. We are looking...
How to manage the local administrators group on Azure AD joined devices
After a device is deployed likely using autopilot, sometime you have a need to add an AzureAD user to the...
Azure AD and Windows hello for business, SSO for on-premises resources
We disabled WFB when we first rolled out autopilot because we are not ready to deploy and support passwordless at...