If you have disabled Internet Explorer Enhanced Security Configuration (IE ESC) and group policy still isn't working this post is for you! If you built a Terminal Server and you did not disable the IE ESC on installation, then subsequently disabled it from the server manager, you may find trying to control users trusted sites via group policy and apply Site to Zone Assignment List has little or no affect. You may find users log out and back in and group policy does not update