Internet Explorer settings via GPO/GPP

OK so there I was, I needed to set up trusted sites and settings for the different zones on Internet Explorer for the domain.  Since we have decided to standardize using Group Policy Opjects (GPOs) and Group Policy Preferences (GPPs) I jumped into it.  Of course I have always hated the way Microsoft handled these settings in the GPO.  Basically you import the settings from the current computer.  Soooo…  First issue is that not all of your 5000 systems are on IE7, IE6, with or without enhanced security, but a jumble of above.  What does this mean?  Well whatever settings you import does not always not work across the board.  Let’s bring in GPP.  Woo hoo, did MS get something right?  Wow you can make all kinds of settings in preferences that you don’t need to import.  ActiveX settings, Java settings and so forth, plus you can make settings for IE 5-6 and or 7 or both, this was way cool… Until you tried to set up trusted sites.  Oh wait you have to go back to GPO to do that, it is unavailable in the GPP part of the policies.  OK, no problem, I set up the GPPs for my policy, then went to the GPO section and yes had to import the local settings to bring in and or set up my trusted sites.  All is well except it does not seem to work on all clients.  The GPP settings do not seem to take effect.  Why?  That is simple MS teased us again.  GPO settings override the GPP settings.  So no matter what you did in the GPP, when you imported the GPO settings it takes precedence.

Ok my rant is over, I will go and add the sites via a script and all will be good, OK Microsoft, why don’t you just get a clue and present all of the options broken down like to do with all of the other settings in the GPO/GPP.

Oh yeah… Proxy and connection settings are similar   MS Get a clue.