How to add trusted sites to group policy?

Question

I found this:
Trusted sites policies can be set at the computer or user level and are located at the relative path of administrative templates: \Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone.
But in the right side of the Trusted Sites Zone, I did not see any option to enter the sites. I'm using IE7.
Help is appreciated.

Answer 1

I have added sites to this exact location, I set them to apply to USERS Settings.   They never apply.  Now I know the policy is being applied since other settings in the GPO are applied and when I run a gpresult /z it shows that my policy was applied.
How come adding sites to the Site Zone Assign does not work?   I've tried on both XP and Windows 7 workstations too.
Here are some notes I had made on this topic (the steps are based around using Local GP Editor, gpedit.msc, but, apply almost exactly to Domain GP)
You can examine the registry keys & values on a machine, to see if the GP settings are applying or not.
Also, note that if the browser is already running in memory when the GP is applied, the browser UI may not reflect the GP settings until all browser sessions are closed.
Local GP Editor
[Path within gpedit.msc:]
\User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\
or
\Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\
[Setting Name:] Site to Zone Assignment List
[Steps to enable the setting:]
Double-click the setting name, to open the setting dialog.
Click <Enabled> radio button
In the <Comment> field, type in a meaningful comment, e.g. <add site URLs to the Trusted Sites zone>
Click <Show> button
In the <Value name> field, type in the URL pattern you want to *add* to the zone, e.g. <http://*.contoso.com>
In the <Value> field, type in the number which represents the browser zone you want this URL to be related to, e.g. <2>
Click <OK> button [to save and exit the table]
Click <OK> button [to save the GP settings]
Because this method uses the "classic" admin templates GP, any existing sites in the specified zone will be removed, and, the GP values will be applied, and,
*the user will be unable to modify the values via the Internet Explorer user interface*
If you need to add sites into zones, but wish to leave the user the ability to further modify the site-to-zone values, you cannot use "classic" GP, but may use another method such as GPP or IEAK.
Relevant Registry keys (when configured by the user, via IE tools, options dialog):
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com\support
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\microsoft.com\*.update
[EscDomains refers to the enhanced security config upon WindowsServerOS]
Relevant Registry keys (when configured by admin templates):
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contoso.org
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blah.org
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)