She documents the change in a change request retroactively (knowing she’ll get yelled at for breaking process). She sets a reminder to remove the “Enforced” flag on Monday after compliance fixes their template. She saves the GPO backup as 2025-03-15_IE_Trusted_Sites_Hotfix .
There it is. The poison pill: – Enabled. group policy edit
The cause isn’t a hacker. It’s a new security template pushed by the corporate compliance team on Friday afternoon—a template that accidentally revoked all Internet Explorer security zone permissions for non-admin users. And because the time-tracking app uses an ancient ActiveX control (the bane of Lena’s existence), every single employee is locked out of submitting their billable hours before the Monday payroll deadline. She documents the change in a change request
She closes the editor. Back in GPMC, she right-clicks the GPO and selects Enforced – because the OU containing the Traders has a conflicting WMI filter that might block inheritance. There it is
She right-clicks the GPO and selects . The Group Policy Management Editor opens. She holds her breath and drills down: