WARNING:
The solution to this problem requires you to edit the registry,
always make backup before implementing,
and if you do not know what you’re doing, don’t do it !
If you’re having problems setting IE security zone sites via GPO, this registry key may be the cause:
“HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains”
I’ve found that if anything is registered under this key, whatever you set in GPO will not be applied.
Solution: Delete the “Domains” key and all subkeys with the following vb script
On Error Resume Next
Const HKEY_CURRENT_USER = &H80000001
strComputer = “.”
strKeyPath = “Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains”
Set objRegistry = GetObject(“winmgmts:\\” & _
strComputer & “\root\default:StdRegProv”)
DeleteSubkeys HKEY_CURRENT_USER, strKeypath
Sub DeleteSubkeys(HKEY_CURRENT_USER, strKeyPath)
objRegistry.EnumKey HKEY_CURRENT_USER, strKeyPath, arrSubkeys
If IsArray(arrSubkeys) Then
For Each strSubkey In arrSubkeys
DeleteSubkeys HKEY_CURRENT_USER, strKeyPath & “\” & strSubkey
Next
End If
objRegistry.DeleteKey HKEY_CURRENT_USER, strKeyPath
End Sub
Thanks to The Microsoft Scripting Guys for example script