Cisco 5505 Administration Guide - Page 113

Using Microsoft Active Directory to Add the Security Appliance to the List of Internet Explorer

Get Cisco 5505 - ASA Firewall Edition Bundle PDF manuals and user guides
UPC - 882658082252
View all Cisco 5505 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 113 highlights

B A P P E N D I X Using Microsoft Active Directory to Add the Security Appliance to the List of Internet Explorer Trusted Sites for Domain Users An Active Directory Domain Administrator can push a group policy to domain users that adds the security appliance to the list of trusted sites in Internet Explorer. Note that this differs from the procedure to add the security appliance to the list of trusted sites by individual users, described in Adding a Security Appliance to the List of Trusted Sites (Internet Explorer), page 2-3. This procedure applies only to Internet Explorer on Windows machines that are managed by a domain administrator. Note Adding a security appliance to the list of trusted sites for Internet Explorer is required for those running Windows Vista who want to use WebLaunch. To create a policy to add the Security Appliance to the Trusted Sites security zone in Internet Explorer by Group Policy using Active Directory, perform the following steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 Log on as a member of the Domain Admins group. Open the Active Directory Users and Computers MMC snap-in. Right-click the Domain or Organizational Unit where you want to create the Group Policy Object and click Properties. Select the Group Policy tab. Click New. Type a name for the new Group Policy Object and press Enter. To prevent this new policy from being applied to some users or groups, click Properties. Select the Security tab. Add the user or group that you want to prevent from having this policy, then clear the Read and the Apply Group Policy check boxes in the Allow column. Click OK. Click Edit. Navigate to User Configuration > Windows Settings > Internet Explorer Maintenance > Security. Right-click Security Zones and Content Ratings in the right-hand pane and click Properties. Select Import the current security zones and privacy settings. If prompted, click Continue. Click Modify Settings. Select Trusted Sites and click Sites. OL-12950-012 Cisco AnyConnect VPN Client Administrator Guide B-1

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
B-1
Cisco AnyConnect VPN Client Administrator Guide
OL-12950-012
APPENDIX
B
Using Microsoft Active Directory to Add the
Security Appliance to the List of Internet Explorer
Trusted Sites for Domain Users
An Active Directory Domain Administrator can push a group policy to domain users that adds the
security appliance to the list of trusted sites in Internet Explorer. Note that this differs from the procedure
to add the security appliance to the list of trusted sites by individual users, described in
Adding a Security
Appliance to the List of Trusted Sites (Internet Explorer), page 2-3
. This procedure applies only to
Internet Explorer on Windows machines that are managed by a domain administrator.
Note
Adding a security appliance to the list of trusted sites for Internet Explorer is required for those running
Windows Vista who want to use WebLaunch.
To create a policy to add the Security Appliance to the Trusted Sites security zone in Internet Explorer
by Group Policy using Active Directory, perform the following steps:
Step 1
Log on as a member of the Domain Admins group.
Step 2
Open the Active Directory Users and Computers MMC snap-in.
Step 3
Right-click the Domain or Organizational Unit where you want to create the Group Policy Object and
click Properties.
Step 4
Select the Group Policy tab.
Step 5
Click New.
Step 6
Type a name for the new Group Policy Object and press Enter.
Step 7
To prevent this new policy from being applied to some users or groups, click Properties. Select the
Security tab. Add the user or group that you want to
prevent
from having this policy, then clear the Read
and the Apply Group Policy check boxes in the Allow column. Click OK.
Step 8
Click Edit.
Step 9
Navigate to User Configuration > Windows Settings > Internet Explorer Maintenance > Security.
Step 10
Right-click Security Zones and Content Ratings in the right-hand pane and click Properties.
Step 11
Select Import the current security zones and privacy settings. If prompted, click Continue.
Step 12
Click Modify Settings.
Step 13
Select Trusted Sites and click Sites.