She writes in her post-mortem note: “Root cause: Compliance did not test GPO in a ring. Fix: Applied targeted preference item with item-level filtering. Lesson: Never edit a GPO at 2 AM without a second set of eyes.”
She creates a new preference item (for compatibility). In the dialog, she switches to the Security tab, selects the “Trusted Sites” zone, and clicks “Custom Level…” group policy edit
It works.
User Configuration → Preferences → Control Panel Settings → Internet Settings She writes in her post-mortem note: “Root cause:
She right-clicks the GPO and selects . The Group Policy Management Editor opens. She holds her breath and drills down: In the dialog, she switches to the Security
She closes the editor. Back in GPMC, she right-clicks the GPO and selects Enforced – because the OU containing the Traders has a conflicting WMI filter that might block inheritance.