Trusted Sites GPO only works for administrators

I've got a major problem and was hoping somebody could help me. I've got a hundred users or so that connect to an RDS Farm. The RDS farm is made up of several Windows Server 2008 R2 servers. One with IE 10 and the other with IE 8.
The problem that I'm having is if add sites to zone assignment in group policy and add sites to the trusted zone it will only work for users that are administrators. I found a reference to this problem and the issue being IE Enhanced Security, but
Enhanced Security is turned off.
If I'm a normal user with Remote Desktop User rights and I go into IE and check Trusted Sites, there is nothing there. If I login as administrator and check I can see all the trusted sites.
Anyone know how I can fix this?

Hi Cyprus,
Please check if you have the computers or users needing the policy are in a group that is specified. Remember that domain users includes all users, domain computers includes all computer, and authenticated users includes both users and computer. By
default, a GPO will be scoped to Authenticated Users.
Also please run gpresult command on non-administrator user to check if it sync to client successfully.
In addition, I suggest you ask Group Policy forum for more professional help:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Karen Hu
TechNet Community Support

Similar Messages

Application Catalog only working for Administrators

Hi guys,
i'm currently troubleshooting a customers SCCM2012 (SP1 CU4) Server. If I open
http://MYSCCMServer/CMApplicationCatalog using an Domain Administrator account the application catalog opens fine and I'm able to start installing applications.
admin user account it just gives a HTTP 400 Error (Site not found). The site has been added to Trusted Sites, all the requirements for the application catalog have been installed prior to the application catalog installation. I even tried to reinstall
a few times, but no success. On a few other customer SCCM's I don't have this issue.
I'm wondering why I get a HTTP Error 400, if it would show up a permission issue OK, but it just seems as it cannot find the website? Did anyone else had that in the past?
PS: The server OS is Windows Server 2012.
Thanks
Stefan

Have you checked the logs portlctl.log and awebsctl.log? These logs may give some clues.
Juke Chou
TechNet Community Support

Site to Site Replication only works for a few hours in the morning (each morning)

We have been fighting an odd active directory replication issue for over a month now and I am hoping that someone can provide some insight. We have 5 AD servers in the following orientation...
Site HQ
- PRIME running Windows 2008 R2
- AD2 running Windows 2008 R2
Site COLO
- AD3 running Windows 2008 (not R2)
- AD3NEW running Windows 2008 R2
Site BRANCH
- AD4 running Windows 2008 R2
The domain is at the Windows 2008 Functional Level.
There are always on site to site VPNs between all 3 sites and IP Intersite Transports Site Links defined for all 3 possible connections with Cost of 100 and interval of 15. Each IP site link is configured with a schedule of available all day long.
Every day the following sequence of events happens...
* Somewhere between 6:30 and 7:30am all the servers start to sync with each other perfectly. We can make AD changes and they replicate across all servers without issues. During this time all the repadmin commands work well across all servers.
* Typically somewhere in the 10:30 to 11:30am time frame we start to get errors replicating data - specifically between the HQ and COLO sites. This manifests itself as Event 1232 Call Timeout from the DC RPC Client and and Event 1925 from the KCC. Additionally
repadmin commands fail when attempting to connect to the BRANCH servers.
* For the rest of the day the intra-site replication between PRIME and AD2 work fine - and periodically the BRANCH AD server is updated as well. But the COLO sites remain unreplicated and continue to get errors for the remainder of the day. While this down
- the ability to ping and remote desktop between the servers is perfectly fine - so even if there were a network hiccup that happens - the network is stable for hours without the sites recovering.
* Magically the next morning around 6:30 and 7:30am all the servers are able to replicate without issue and we get 3-5 hours of immediate replication and then it happens again.
As I stated above - there is always on site-to-site VPN connections between all 3 sites that are actively monitored by PRTG. These connections remain open all day long. The Site topology has the COLO servers attempting to replicate with the HQ servers -
and both sites have 100MB data connections that remain active during the entire time. Additionally PRTG bandwidth monitoring shows that these links have no spikes in traffic anywhere near the max capacity of those links during the time that the outages begin
nor during the rest of the day.
Does anyone have any insight as to why these servers would stop communicating with each other about the same time every day and report errors? Also why it would magically start to work again each day without any changes being made to the network or the AD
configuration?
This has been going on for over a month now. When it first started to happen we had 1 Windows 2008 server and 2 Windows 2003 servers in the HQ. We phased out the Windows 2003 servers and upgraded the functional level to Windows 2008 - that did not solve
the problem. We tried to put a new Windows 2008 R2 server out at the COLO site hoping that if it was limited to the other server then only the one server would be impacted. But now they both appear to be having connectivity issues at the same time.
It is as if there is one hung connection that is blocking all the other syncs to this site and then someone each morning that bottleneck is released.
Thank you in advance for any direction you can provide.

As was stated above - ALL Domain Controllers have direct access to each other through Firewall to Firewall site to site VPNs and the Inter-Site Transport Links mirror that setup. So from the OS perspective any of the AD servers can directly connect to any
other one.
There are 3 IP Inter-Site Transport Links defined
HQ < - > COLO (Contains HQ and COLO sites) Cost 100 Replication Interval 15
HQ < - > BRANCH (Contains HQ and Branch sites) Cost 100 Replication Interval 15
COLO < - > BRANCH (Contains COLO and Branch sites) Cost 100 Replication Interval 15
And on IP Inter-Site Transports "Bridge all site links" is enabled (although disabling it doesn't fix this problem as we have already tried that).
Right now the servers are claiming (via Active Directory) to be unable to replicate with each other. But I am able to do direct pings as well as open stream sockets using "telnet <otherserver> <port>" on ports 3268 (gc), 88 (kerberos),
389 (ldap), 135 (replication), 636 (ldap ssl), 53 (DNS). So there is nothing that I can see between the servers that is blocking TCP connectivity.
I cannot seem to make this any clearer. The sites are 100% functional and responsive for several hours per day - and then mysteriously go into a state of complete denial for a lack of a better word for the rest of the day - only to return back to normal
again reliably each morning.
It is as if the sites get into a mode where something in the RPC area are simply refusing to talk to each other despite the servers having full access at the network level.
Another data point to add to this mystery. While it is in the state where the HQ and COLO servers are refusing to sync with each other. You can launch the AD Users and Computers snap-in, right mouse click on the domain, change the Current Directory server
and all 5 servers show up as ONLINE. You can pick any of them (including the one that is unable to replicate with) and make a direct change on that server.
So while the servers are complaining about being unable to talk to each other - the snap in is connecting between those servers and is able to modify it without issue.
Conversely - when the replication is failing the DNS management tool is unable to connect to the remote servers (i.e. COLO can show itself and the other COLO server. HQ can show PRIME, DC2, and DC4 without issue. But no overlap).
Not sure that helps at all - but shows our frustration when two servers refuse to replicate but you can easily remote connect from one to the other and make the change.

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. Please help!

Safari and firefox stop working after a few minutes of browsing, regardless of what site I'm on. I have to restart my computer to get internet access again but it only works for a few more minutes, then I have to restart again. I don't get a spinning ball, it just stops working at whatever page it's on. I can close the program just fine but when I re-open it, either safari or firefox, it freezes trying to load the hompage. This started a few days ago after trying to stream a movie on my computer. I'm on a Mac Air OS X Version 10.6.8 and have downloaded all updates. When I go into finder, it says I have over 80 gigs available. Is there some other memory cache that I need to check? Thanks so much for your help.

ejwoodall wrote:
It's not a router problem as I explained in my post. If it was a router problem then I wouldn't have the problem everywhere I go. It is an issue with the software.
Then I guess the millions of people running 10.5.7 with no issues are just hallucinating that their machines are working fine?
I'm not trying to belittle your issues; you're certainly having them and I know first hand how annoying an intermittent AirPort issue can be. (In fact, mine was due to an AirPort driver bug that no one else seemed to suffer from.)
The single best diagnostic you could do is take your system running 10.5.7 to an Apple Store, and try using their in-store network.
If your machine performs flawlessly, it may be a router issue.
If your machine has connectivity issues there, it may be a hardware problem with your machine.
There have been numerous people in multiple threads over the years who swore that an update was buggy because things used to work, but returned later to sheepishly admit that they took their machine in, a problem was found and fixed, and now their Mac works flawlessly with the newer software.
But simply reinstalling 10.5.5 in no way means the explanation of how firmware bugs may be at play here is incorrect.
In the context of that explanation, all you've done is possibly reinstall software that asks to add "2 + 3."

Safari auto fill only works for some sites on my new iMac

Hi, Safari autofill only works for a few websites on my new iMac. Apple Care tried to change some settings which did not help. Autofill is checked in preference and we worked on Keychain access.
Thank you for your advice.

Select your card in Address Book. Then select
Card ▹ Make This My Card
from the menu bar. In Safari, select
Safari ▹ Preferences ▹ AutoFill ▹ AutoFill web forms: Using info from my Address Book card.

How do I disable "this connection is untrusted" I visit the same web site mutiple times in a day visit I get this same error, these are trusted sites within my work

How do I disable "this connection is untrusted" I visit the same web site mutiple times in a day and every visit I get this same dam error, these are trusted sites within my work environment. This is getting really old, and I am thinking that I should just uninstall, which is a pity becuase I do like firefox

Okay, before you copy 'n paste canned responses, you should read the post first.
'''The date & time on my computer is correct''' I've already checked this.
'''I don't give a damn why the site is untrusted''', I probably know why in fact (behind corporate proxy server).
As for exporting a known good certificate from another browser, sure good idea, but it doesn't seem to work. I tried exporting from IE, Firefox did the import without complaint, but it still complains. At any rate, I don't care about that. '''I just want to permanent disable it for ALL SITES for ALL TIME'''. Is that too much to ask for?
Judging by the number of posts on this topic, apparently I am not the only one complaining about this.

Hide "more" button in a list view, only works for first item in the list

I have the following code in a list view that outputs several dozen items in a web app. The code only works for the first item, how can I make it loop through and execute the test for each item in the list view? The {tag_hide more button} is a checkmark field that yields a numeric 1" if checked otherwise yields a numeric "0".
<div id="more-option">
        <p class="right"><a href="{tag_itemurl_nolink}" class="btn btn-small btn-very-subtle">More →</a></p>
      </div>
      <div class="more-selection" style="display: none;">{tag_hide more button}</div>
      <script>
if ($(".more-selection").text() == "1") {
    $("#more-option").hide();
</script>

What's the URL for the site where you are using this? Offhand, it looks like it should work with your first example so you are either placing the script before those elements are loaded or you might try wrapping your current javascript inside the:
$(document).ready(function() {
--- your existing javascript here
This make sure the code runs once all the html is loaded on the page. Without seeing a URL and debugging with the js console in Chrome I can't give you a solid answer.
But, I do know that you can probably do this with a lot less markup. Once we figure out what the actual problem is I have a better solution mocked up for you on jsfiddle.
When looking at my HTML code on jsfiddle, please realize I setup some dummy HTML and removed your tags and added actual values which would be output by your tags. The main thing I did was remove the whole div.more-selection and instead, added a "data-is-selected" attribute on your div.more-option element. Then, in my javascript for each div.my-option element on the page, we loop through them, find the value of that data attribute and hide that div if it's less than 1 (or 0).
Here's the fiddle for you to look at: http://jsfiddle.net/thetrickster/Mfmdu/
You'll see in the end result that only two divs show up, both of those divs have data-is-selected="1".
You can try pasting the javascript code near the closing </body> tag on your page and make sure to wrap my js inside a <script> tag, obviously. My way is neater on the markup side. If you can't get it to work it's likely a jquery conflict issue. My version is using the $(document).ready() method to make sure all the code is loaded before it runs.
Best,
Chris

My spell check only works for about half of an article. Is there a way to fix this?

When I'm on a wiki, looking at an article, I sometimes see a couple spelling errors that just bug me, so I sometimes go in and fix them. However, when I pull up the editing page, the spell check only works for about the first half of the article. I can't find the errors if they're in the second half of the article. Is there a way to fix this?

You can try basic steps like these in case of issues with web pages:
Reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.
*Hold down the Shift key and left-click the Reload button
*Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
*Press "Command + Shift + R" (Mac)
Clear the cache and the cookies from websites that cause problems.
"Clear the Cache":
*Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox/Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

I have the portable BOSE sound dock and after updating my ipod to ios7 the remote control of the dock only works for the volume but doesnt work for skipping songs....Is there a solution to this?

I have the portable BOSE sound dock and after updating my ipod to ios7 the remote control of the dock only works for the volume but doesnt work for skipping songs....Is there a solution to this?

Have you went to Bose"s support site?
Sometimes this works
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.
However, sometimes an iOS update breaks compatibility and you will have to wait for an firmware update for the Bose or an iOS update.

My ringer is no longer working for text and email notifications. Only working for phone calls. I have gone through all the settings to see where something is off. Not finding anything. I have tried changing the tone and it just vibrates on everything.

My ringer is no longer working for text and email notifications. Only working for phone calls. I have gone through all the settings to see where something is off. Not finding anything. I have tried changing the tone and it just vibrates on everything.

Ok so I happened to figure it out while on the phone to apple support. Even though the guy was very nice, I think I knew more than him! He was explaining very basic resolution principles I played about. I had the second option in displays resolution. All I did was unplug the HDMI cable, click on 'best for display' then plugged the HDMI in and my resolution on the normal monitor changed to the normal blue, then went black momentarily and then changed to a strange resolution but another window appeared that said SONY BRAVIA HDMI at the top! Hey presto! Don't know why it didn't do it yesterday - I probably left the HDMI cable in or something! Oh well. Problem solved!

With my i phone 4 , the Push notifications doesn't work for apps like (fb viber , whatsapp etc ) it only works for the official apps like message even when im using the phone, has this probleme with the iOs 6.0.1 and also with the iOs 6.1

With my i phone 4 , the Push notifications doesn't work for apps like (fb viber , whatsapp etc ) it only works for the official apps like message even when im using the phone, has this probleme with the iOs 6.0.1 and also with the iOs 6.1

This isn't an issue. Notice the screen prior to the one that shows usage has an iCloud section and a Manage Storage button. For this button to activate ios needs to download a few kb from icloud. Switching back to this screen forces ios to download those few kb.

Time Capsule only works for one device at a time, how to make it capable to be used for multiple devices at times

Time Capsule only works for one device at a time, how to make it capable to be used for multiple devices at times.
Please help to set it up, thanks in advance

You need to give more info..
Firstly only works for what.. networking.. backup.. wireless. You need more nouns.. more adjectives... describe what you want and what fails.. then we can figure out why.
Most likely you have bridged it when it should be in router mode..
Most likely you are using Lion or ML which has the airport utility bridge the TC by default.
Change it to working as a router. That might help.
If you press reset button it will default back to router btw.
If you are on Lion.. use a real utility. http://support.apple.com/kb/DL1547

My Ipod touch does not work properly.When i charge it,it only works for 5 min.n gets discharge.I showed it to the apple store in banglore n the person told me its fine n It is working properly.Bt its not working properly.Can someone help

My Ipod touch does not work properly.When i charge it,it only works for 5 min.n gets discharge.I showed it to the apple store in banglore n the person told me its fine n It is working properly.Bt its not working properly.Can someone help

If after you charge it for about three hours and it only last about five minutes the battery is probably dead or there could be another hardware problem. I would go back to the Apple store and ask them specifically how can it be OK if the fully charged battery only lasts five minutes.

My applications always quit...iChat only works for 4 minutes at a time HELP

ok so i bought leopard today
i installed it but i skipped that step when leopard checks the volume of your comp or whateever (not sure if that will affect what im about to say)
now i have leopard...i love it but my applications just KEEP quitting out and my iChat only works for 4 minutes and then my friends stop recieving my messages
should i uninstall and re install?? how would i go about doing that??
anything just please help

One possibility is that your hard drive is failing. If you don't have backups of any data you don't want to lose, that needs to be your number one priority. Get that data backed up. Once you have done that, you can start exploring options.
Open Disk Utility, select your hard drive and take a look at the SMART status:
If it says anything other than Verified, the drive is definitely failing. If it says Verified, all that means is that it isn't failing in a way that the drive can detect.

ITUNES ONLY WORKS FOR 5 MINUTES AT A TIME

iTunes stopped working about a month ago, but then I fixed it using the msconfig solution. It worked for a while now I have the same problem, i can fix it, but then iTunes only works for about five minutes before closing. This is the only way I can fix it; first, by re-installing iTunes, then, doing the msconfig solution and restarting the computer. Then after about 5 minutes it closes. To open it again I have to go through the whole proccess. I cannot figure out how to permanently fix it.

Sounds like you have some malware that is interfering with iTunes.
What do you have to turn off in msconfig to get iTunes working?
It's pretty involved to remove it. If you have purchased security software like Norton or McAfee, I suggest contacting them for help.
Otherwise try this
http://mysite.verizon.net/dbjcgj/id1.html

Trusted Sites GPO only works for administrators

Similar Messages

Maybe you are looking for