1

I just deployed an custom Windows 10 ISO I created and I can't set my local file server as a trusted site in internet options. The site button is greyed out. The only change I made in the image was adding the site pre-sysprep and now It not only didn't keep the settings through the sysprep process, but also locked me from making changes to internet options. I did test this image on another computer before adding the site pre-sysprep and post deploy I was able to add the site via normal methods. Clearly somehow adding the site to trusted sites before sysprepping the OS caused the issue. Unfortunatley, this is not an easy computer to re-deploy or I would just remake the ISO and re-deploy.

Update Re Comment [The Goal is to get RID of this Message]:

  • I don't use IE or care about its "options", I just want to get rid of this nag message when I run an exe from my fileserver as almost all my software is installed on the server.

enter image description here

  • Any idea how I can reset the settings to default?
  • How can I add the site via RegEdit? I know I only need to add one site and I use the IP not DNS.

I know the keys are related to HKLM/SOFTWARE/Policies/Microsoft/Windows/CurrentVersion/Internet settings/, I'm thinking of exporting the entire "tree" from the other computer and importing it here, but that's a hassle as well as its not my computer.

Any ideas!? Thanks!

PS: Windows 10 LTSB v 1607 x64 -Up-2-date

enter image description here

Update: I had IE11 not installed, by installing it, Internet Options now look as they used to, but the option is still greyed out!

enter image description here

Update 2: I have "reset" IE Options, but still Grey :(

enter image description here

  • I see the same photo. That registry key you mentioned shouldn’t exist at all if you don’t want policies enforced on your browser. Just delete it. Or rename it, if you want to see the effects. – Appleoddity Mar 12 '18 at 23:49
  • I dont really care about IE, my goal is to stop the popup when I run an exe from my file server over SMB. So I'm not sure how to apply that to your comment lol – FreeSoftwareServers Mar 12 '18 at 23:51
  • @Appleoddity I updated an image to explain just incase – FreeSoftwareServers Mar 12 '18 at 23:53
  • Windows Explorer respects IE group policies. Are you an Administrator? – Ramhound Mar 13 '18 at 0:17
  • I'm logged in as one, but I haven't messed much with Group Policy and I was under the impression sysprep generalize wouldn't keep group policy anyway. What GPO would I look at? – FreeSoftwareServers Mar 13 '18 at 0:20
1

This worked for me even though it's for Windows XP.

All credit to the original author.

FYI, my system specs are:

OS Name:                   Microsoft Windows 10 Pro
OS Version:                10.0.17763 N/A Build 17763

LINK: Sites" button and "Custom Level" slider are grayed out in Internet Options - Security tab

This is the contents of that site should it ever get taken down.


When you open Internet Options - Security tab and click on any Zone (except Internet Zone), the Sites button may be grayed out. As a result, you may be unable to add or remove a website to the specified Zone. Additionally, you may also notice that the Custom level slider is grayed out. This prevents you from customizing the Security level for that particular Zone.

The Flags value in the registry governs the above two options (and more) for each Zone. See Description of Internet Explorer security zones registry entries for more information on the Flags value.

To enable the Sites button and the Custom Level slider for that particular Zone, follow these steps:


Open Registry Editor (regedit.exe) and navigate to

  1. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\{Zone ID}

    Zone             {Zone ID}
    Local intranet    1
    Trusted sites     2
    Internet          3
    Restricted sites  4
    
  2. Backup the key by exporting it to a REG file.

  3. In the right-pane, double-click Flags and click Decimal
  4. Add 3 to the existing Value data

    • Example: If Flags value reads 0 (Decimal), set it to 3 (i.e.,0 + 1 + 2)

    • Flags value listing (from MS-KB 182569)

        Flags value Setting
    1     Allow changes to custom settings
    2     Allow users to add Web sites to this zone
    4     Require verified Web sites (https protocol)
    8     Include Web sites that bypass the proxy server
    16    Include Web sites not listed in other zones
    32    Do not show security zone in Internet Properties
    64    Show the Requires Server Verification dialog box
    128   Treat Universal Naming Connections (UNCs) as intranet connections
    
  5. Close Registry Editor and restart your machine and follow the route in your OP.

    • For me, the apply button was greyed out but it works none the less.

    • The entry I have entered is file://PRINCE_NASEEM but yours will differ.

|improve this answer|||||
  • Nice, this looks like it enables the menu operations I'm used to vs fixing via GPO. This would likely be the better fix for me to use before "Sysprepping" an image. – FreeSoftwareServers Jun 10 '19 at 9:07
  • Thanks, I'm glad you found this useful. It's good because, if it works in win XP, then there's a good chance it works right up to win 10. – Ste Jun 11 '19 at 10:09
0

The issue was that Group Policy was somehow blocking me from adding into IE Options like I'm used to.

You want to configure Group Policy like so:

Navigate to Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page >> Site to Zone Assignment List

enter image description here

The "Values" are as follows:

INTERNET EXPLORER GROUP POLICY ZONE NUMBER MAPPING
Zone Number Zone Name
1   Intranet Zone
2   Trusted Sites zone
3   Internet zone
4   Restricted Sites zone

After configuration open CMD in Administrator mode and run the following:

gpupdate /force

Now reboot and test!

Sources:

https://community.spiceworks.com/topic/1182041-gpo-for-local-intranet-site http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-configure-internet-explorer-security-zone-sites/

|improve this answer|||||

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for?Browse other questions tagged or ask your own question.