Just setup DFS start menu redirection and now getting a security warning

[Jaan]

Hi all,

 

Sure this is something in nothing. I'm sure i have to add my domain into a trusted location, i just can't remember for the life of me.

 

Reverting to a direct shared location fixes this issue. HOwever i really need it to be a DFS location.

 

Any help would be great!

 

Cheers all.

 

[DGardiner]

Hi all,

 

Sure this is something in nothing. I'm sure i have to add my domain into a trusted location, i just can't remember for the life of me.

 

Reverting to a direct shared location fixes this issue. HOwever i really need it to be a DFS location.

 

Any help would be great!

 

Cheers all.

 

[ATTACH=CONFIG]48181[/ATTACH]

you need to set the namespace addresses as trusted zones if i remember right

Edited March 20, 2018 by DGardiner

[RobD]

You'll probably need to classify the site as a safe zone in GPO:

 

Computer Configuration/Policies/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Site to Zone Assignment List

 

User Configuration/Policies/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Site to Zone Assignment List

 

Or reg setting:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\companyname.lan\file DWORD 1 (For Local intranet zone)

[Jaan]

Any ideas where i would find that?

 

I can find one for internet explorer, but shouldn't it be file explorer or a global security policy?

 

Can't see the forest because of the trees!

[DGardiner]

Any ideas where i would find that?

 

I can find one for internet explorer, but shouldn't it be file explorer or a global security policy?

 

Can't see the forest because of the trees!

 

this looks right

[h=3]Resolution[/h]To resolve the issue I had to add DFS root path to Internet Explorer Local Intranet Zone. This can be done either locally on individual machines, or via Group Policy.

Locally:

 

• Open Internet Explorer > Internet Options > Security tab
  
• Select Local Intranet and click on Sites.
  
• Click on Advanced and add your DFS Root in format: file://domain.local
  

Via Group Policy:

 

• User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.
  
• Enable Policy called Site to Zone Assignment List.
  
• Click Show and your DFS Root in format file://domain.local (value for Local Intranet should be 1).
  

[Jaan]

Awesome thanks, i'll give it a go...... it was the internet explorer part that confused me...... we don't even use it!

[Jaan]

Worked a treat!

 

Thanks guys!