Categories
Group Policy Windows Server

Add Site to Trusted Sites Zone with Group Policy

Internet Explorer has four Security zones (numbered 1-4) which are used by the Site to Zone Assignment List policy to associate sites to:

  1. Intranet zone
  2. Trusted Sites zone
  3. Internet zone
  4. Restricted Sites zone

To add a site to the Trusted Sites zone, do the following:

  1. Create a new Group Policy Object (GPO) or edit a preexisting object
  2. Navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page
  3. Select and open the “Site to Zone Assignment” List policy
  4. Set the policy to Enabled
  5. Click the “Show…” button
  6. In the pop-up window, each row represents a domain (Value name) and zone (Value) pair. Enter the site name in the “Value Name” field and 2 (for Trusted Sites zone) in “Value” field
    Add site to Trusted Sites Zone Group Policy
  7. Click OK

 

Categories
Group Policy Windows Server

Allow Internet Explorer Pop-up Exceptions with Group Policy

Group Policy Allow Internet Explorer Pop-ups

If you find yourself in a situation where you need to allow pop-ups in Internet Explorer via Group Policy, here’s how:

  1. Create a new Group Policy Object (GPO) or edit a preexisting object
  2. Navigate to Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
  3. Select and open the setting “Pop-up allow list”
  4. Set the policy to Enabled
  5. Click the “Show…” button
  6. Enter the domain name(s) which will be allowed to open pop-up windows.
    • Note that only domain names are allowed, so www.coreyblaz.com is valid, but https://www.coreyblaz.com is not.
Categories
Citrix

Citrix USB Error “Device appears to be in use and cannot be attached”

Device appears to be in use and cannot be attached. Do you want to force close the deivce and redirect.

If you’re attempting to redirect a USB device to Citrix and receive the error “Device appears to be in use and cannot be attached,” here’s how to suppress it. As the error indicates, the USB device that you’re attempting to redirect is in use on your local system and Receiver cannot redirect it without forcefully doing so. Depending on your particular scenario, this may or may not be a good idea. If you definitely want suppress this error, set the following Registry entry:

64 Bit:

  • [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Policies\Citrix\ICA Client\GenericUSB]
    “EnableUSBForceRedirection”=dword:00000001
  • [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\ICA Client\GenericUSB]
    “EnableForceRestartForHID”=dword:00000001

32 Bit:

  • [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\ICA Client\GenericUSB]
    “EnableUSBForceRedirection”=dword:00000001
  • [HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ICA Client\GenericUSB]
    “EnableForceRestartForHID”=dword:00000001