Cisco 5505 - ASA Firewall Edition Bundle Administrator's Manual page 113

Using Microsoft Active Directory to Add the
Security Appliance to the List of Internet Explorer
Trusted Sites for Domain Users
An Active Directory Domain Administrator can push a group policy to domain users that adds the
security appliance to the list of trusted sites in Internet Explorer. Note that this differs from the procedure
to add the security appliance to the list of trusted sites by individual users, described in
Appliance to the List of Trusted Sites (Internet Explorer), page
Internet Explorer on Windows machines that are managed by a domain administrator.
Note Adding a security appliance to the list of trusted sites for Internet Explorer is required for those running
Windows Vista who want to use WebLaunch.
To create a policy to add the Security Appliance to the Trusted Sites security zone in Internet Explorer
by Group Policy using Active Directory, perform the following steps:
Log on as a member of the Domain Admins group.
Step 1
Open the Active Directory Users and Computers MMC snap-in.
Step 2
Right-click the Domain or Organizational Unit where you want to create the Group Policy Object and
Step 3
click Properties.
Select the Group Policy tab.
Step 4
Click New.
Step 5
Type a name for the new Group Policy Object and press Enter.
Step 6
To prevent this new policy from being applied to some users or groups, click Properties. Select the
Step 7
Security tab. Add the user or group that you want to prevent from having this policy, then clear the Read
and the Apply Group Policy check boxes in the Allow column. Click OK.
Click Edit.
Step 8
Navigate to User Configuration > Windows Settings > Internet Explorer Maintenance > Security.
Step 9
Right-click Security Zones and Content Ratings in the right-hand pane and click Properties.
Step 10
Select Import the current security zones and privacy settings. If prompted, click Continue.
Step 11
Click Modify Settings.
Step 12
Select Trusted Sites and click Sites.
Step 13
OL-12950-012
A P P E N D I X
2-3. This procedure applies only to
Cisco AnyConnect VPN Client Administrator Guide
B
Adding a Security
B-1