Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Comment configurer Windows pour faire confiance à un partage réseau via GPO ?

ayi

I keep getting the following warning whenever I try to open a share from my DFS.
How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP?
It seems odd that it wouldn’t do so automatically.
<hr>
Source : <a href="https://superuser.com/questions/149056/disable-these-files-might-be-harmful-to-your-computer-warning" rel="noopener nofollow ugc">Server Fault</a>

ayi_2

While the related SuperUser <a href="https://superuser.com/questions/149056/disable-these-files-might-be-harmful-to-your-computer-warning">question</a> has many solutions for this, they are mostly from the user’s perspective: even the solution related to group policy uses Local Group Policy Editor and is far behind the accepted solution. Therefore, I’ll just add a quick answer on how to do this for the whole network.
Create a GPO and enable three settings. Related descriptions and values explained in citations.
Both Computer Configuration and User Configuration has these:
<ul>
<li></li>
</ul>
Policies \ Administrative Templates \ Windows Components \ Internet Explorer
<ul>
<li></li>
</ul>
Internet Control Panel
<ul>
<li>
Security Page
</li>
<li></li>
</ul>
Intranet Zone Template > Enabled > Low
<blockquote></blockquote>
This template policy setting allows you to configure policy settings 
in this zone consistent with a selected security level, for example, 
Low, Medium Low, Medium, or High.
If you enable this template policy setting and select a security 
level, all values for individual settings in the zone will be 
overwritten by the standard template defaults.
<ul>
<li></li>
</ul>
Site to Zone Assignment List > Enabled > Show…
<ul>
<li></li>
</ul>
Valuename = <code>yourserver</code>
<blockquote></blockquote>
A host for an intranet site, or a fully qualified domain name for 
other sites. The valuename may also include a specific protocol. For 
example, if you enter <code>http://www.contoso.com</code> as the valuename, other 
protocols are not affected. If you enter just <code>www.contoso.com</code>, then 
all protocols are affected for that site, including http, https, ftp, 
and so on. The site may also be expressed as an IP address (e.g., 
<code>127.0.0.1</code>) or range (e.g., <code>127.0.0.1-10</code>).
<ul>
<li></li>
</ul>
Value = <code>1</code> (Intranet zone)
<ul>
<li></li>
</ul>
Intranet Zone
<ul>
<li></li>
</ul>
Show security warning for potentially unsafe files > Enabled > Enable
<blockquote></blockquote>
If you enable this policy setting and set the drop-down box to Enable, 
these files open without a security warning. If you set the drop-down 
box to Prompt, a security warning appears before the files open.