She writes in her post-mortem note: “Root cause: Compliance did not test GPO in a ring. Fix: Applied targeted preference item with item-level filtering. Lesson: Never edit a GPO at 2 AM without a second set of eyes.”

She opens Group Policy Management Console (GPMC) as a domain admin. Her heart is pounding. She navigates to:

She accidentally edited the wrong zone. If she applied this, she’d be prompting users for ActiveX on every public website—a security nightmare that would trigger an immediate incident report.

She’s so tired. Her cursor hovers over OK . But she notices something awful: the drop-down at the top of the Internet Properties window says “Internet Zone” – not Trusted Sites.

User Configuration → Preferences → Control Panel Settings → Internet Settings