Home > Internet Explorer > Internet Explorer Zonemapping Failed (no Data)

Internet Explorer Zonemapping Failed (no Data)

Contents

So I copied the entries out into notepad and what do you know, they were fricking commas. The entries are in the format "http(s)://FQDN" or "http(s)://*.subdomain.domain.com" With a gpupdate/force the policy was updated without the warning occurring. Edited by Simone_Bennett Tuesday, August 14, 2012 9:26 AM Proposed as answer by Jackson WU Friday, May 31, 2013 8:01 PM Tuesday, August 14, 2012 9:26 AM Reply | Quote 0 All Rights Reserved. http://3swindows.com/internet-explorer/windows-failed-to-apply-the-internet-explorer-zonemapping-settings-1085.html

Please look for any errors reported earlier by that extension. I know which group policy object its applying these settings but cant find which of the entries in the site to zone assignment list is causing this issue. When I do Change Control for the customer and fix all their Site to Zone mapping policies, I will let you know what I find out. On XP/2003 we don’t have this nice 4016 event to tell us the name of the offending GPO. https://social.technet.microsoft.com/Forums/office/en-US/c8ffbd30-6ef0-4ae5-a2c7-b0b11effb379/windows-failed-to-apply-the-internet-explorer-zonemapping-settings-the-data-was-invald-event-id?forum=winserverGP

Internet Explorer Zonemapping Failed (no Data)

If you are recieving the zonemapping error, chances are you have either incorrectly used wildcards (see Lurge reply for valid entries) OR you have made a typo. Userenv logging has been documented for a long time in KB article 221833, but it is a bit harder to find information on GPSVC logging that is new to Vista/2008. The group policy failed to be applied due to various reasons (reported earlier) and this event simply records the failure without pinpointing to a specific cause. Webster...

  1. For each entry that you add to the list, enter the following information: Valuename - A host for an intranet site, or a fully qualified domain name for other sites.
  2. IInternetSecurityManager::SetZoneMapping method Problems Adding Top-Level Domains to Zone Sites List Internet Explorer’s Explicit Security Zone Mappings Tested the following patterns from the articles: *://*.example.com - Valid, becomes *.example.com http://*.contoso.co.uk  - Valid
  3. GPSVC(444.91c) 17:03:40:02 SetRegistryValue: ListBox_Support_ZoneMapKey => 1 [OK] GPSVC(444.91c) 17:03:40:02 SetRegistryValue: 192.168.* => 1 [OK] The value is written to the following registry location: HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapKey The registry.pol file in the GPO
  4. Replaced the commas with periods and it works like a charm. "Blind" luck.
  5. Event Type: Error Event Source: Userenv Event Category: None Event ID: 1085 Date: 7/29/2008 Time: 11:03:23 AM User: NT AUTHORITY\SYSTEM Computer: M1 Description: The Group Policy client-side extension Internet Explorer Zonemapping
  6. I had no typos or misplaced wildcards but I did have a mapping of the domain lm.se that caused the 1085 error.
  7. This is then performed on the client itself, when the "Internet Explorer Zonemapping" Group Policy Extension will convert the registry into the format which Internet Explorer uses itself.
  8. Good or bad GPOs? - my blog… And if IT bothers me - coke bottle design refreshment (-: Wednesday, July 29, 2015 4:59 PM Reply | Quote 0 Sign in to

Is there a way to export/import the list of sites for editing? Many of the links here and in other locations take me to unsupported Microsoft documentation. Greetings/Grüße, Martin Mal ein gutes Buch über GPOs lesen? Applying Internet Explorer Zonemapping Policy Hangs Internet Explorer Zonemapping settings might have its own log file.

Event Xml: 1085 3 87 The parameter is incorrect. Internet Explorer Zonemapping {4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}   What cause Internet Explorer Zonemapping Gpo I've confirmed that the changes I've made to the GP are replicating and can see them applied if i run gpresult on the workstations. Check the previous Event-ID 4016 that report the GPO that is causing the issue: Checking the GPO, I found an invalid entry on "Site to Zone Assignment List". Then I logged into a clean test machine did some testing.What I found after a few hours of testing was; regardless of the site that I have listed in group policy

If it's possible, I would go ahead with a testing workstation and user both receiving none of your corporate GPOs, then link one by one and check. Internet Explorer Zonemapping Registry What I found was there were many hundreds of these events every day on every XenApp server. Covered by US Patent. ProcessGPOList: Extension Internet Explorer Zonemapping returned 0x57.

Internet Explorer Zonemapping Gpo

As is my practice, the first thing I start doing is looking in the event logs. http://carlwebster.com/troubleshooting-microsoft-group-policy-site-to-zone-mapping/ An example of English, please! Internet Explorer Zonemapping Failed (no Data) I solved it. Internet Explorer Zonemapping Log File Location This logfile contains all the IPsec policy errors.

Internet Explorer Zonemapping settings might have its own log file. http://3swindows.com/internet-explorer/internet-explorer-keeps-crashing-windows-7.html AKA "*.mil" and "*.gov" 2. If that is the case, verify that the machine is located in an OU affected by the policy. Tuesday, August 12, 2014 9:07 PM Reply | Quote 0 Sign in to vote Interestingly, it seems that IE Zonemapping does not like too short domain names either. Event Id 1085 Tcp Ip Settings

Brown Gabe Knuth Helge Klein Jarian Gibson Javier Sanchez Alcazar Jim Moyle Joe Shonk Mike Nelson Neil Spellings Nico Luedemann Remko Weijnen Ruben Spruijt Stephane Thirion Steve Greenberg Thomas Koetzing Thomas USERENV(290.888) 13:55:00:638 ProcessGPOList: Entering for extension Internet Explorer Zonemapping USERENV(290.888) 13:55:00:669 UserPolicyCallback: Setting status UI to Applying Internet Explorer Zonemapping policy... Once all policies had been reviewed, I used Excel to remove all the duplicate entries and sorted the remaining entries. http://3swindows.com/internet-explorer/internet-explorer-failed-to-create-asp-object.html Figure 21 Obviously GPUpdate /force is not going to like this.

Good or bad GPOs? - my blog… And if IT bothers me - coke bottle design refreshment (-: Tuesday, September 22, 2015 9:55 AM Reply | Quote Microsoft is conducting an Internet Explorer Zonemapping Settings Log File He then reached out to a friend of his, Martin Binder, who sent back some useful information. If Userenv Comments are closed. © 2017 Microsoft Corporation.

I resolved my issue however.

Here is the code I used to scan SYSVOL looking for all policies that contain a seczone.inf file. $pwdpath = $pwd.Path If($pwdpath.EndsWith("\")) { #remove the trailing \ $pwdpath = $pwdpath.SubString(0, ($pwdpath.Length - Please click on the "More information" link. The reply from Martin about what is valid and invalid: This is a bug in how Windows processes the lists in that policy setting. Event Id 7016 Internet Explorer Zonemapping I did a quick PowerShell script to gather all the 1085 EventIDs from the System event log from their hundreds of XenApp 6.5 servers.

Internet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. UPDATE: I disabled the original policy and created a new one with only one trusted site address in it. Figure 22 But what does my Trusted Sites show. http://3swindows.com/internet-explorer/internet-explorer-11-will-not-install.html My laptop lab’s domain controller is Server 2012 R2 and the Forest Functional Level is 2012 R2.

Let’s go ahead and first find the Group Policy object (GPO) that is causing the pain. But if you are curious, you can enable GPSVC logging via the registry. Looking at my Trusted Sites shows just the original entry is there. Exchange Server Error -1018: How Microsoft IT Reco...

Even with 5 minutes per server (to check the logs and other parameters), it may take an hour to make sure that everything is ok and no "red lights" are blinking After I removed the bad entry and added a new one with the zone value this time, it stopped producing the error in GPUPDATE. The 7016 would show up in the Group Policy operational log on Vista/2008 (Event Viewer\Applications and Services Logs\Microsoft\Windows\Group Policy\Operational). Looking for official info on using *.domain.com and how short domain names cause issues like *.abc.co I have run in to the issue with the *.abc.co and can resolve it (user

If you'd like to say thanks, please consider making a donation to keep them going! I don’t have enough entries in my lab to know. x 46 Anonymous - Extension: Internet Explorer Zonemapping - We had an IP address with wild cards entered in for a specific zone. x 44 Anonymous I had this event in conjunction with EventID 107 from source Folder Redirection.

If my answer was helpful, I'm glad about a rating! so i add : wrong: https://*host.domain.com correct https://*.host.domain.com need only "." Thursday, January 16, 2014 12:14 PM Reply | Quote 0 Sign in to vote I've always used *.domain.com without issue See EV100320 (Windows failed to apply the Wireless Group Policy settings) for details on how the problem was identified. There's nothing either side of this error in the log that shines any more light on the issue.

I got the 1085 error as well and found this thread. One of the entries only had one "/" after the colon in the URL.