I had a request for a server running a tool to allow users to access it via Citrix and not have to enter the URL into the trusted sites.
With old versions of IE, you would simply modify the local GPO for Internet Settings. To my surprise, this was gone. It seems Microsoft decided to favor Global Policies starting with version 10 for such issues. It makes sense when it involves many systems; but It seems overkill for one system. I do not have access to the Domain Controllers so my choices were rather limited.
I decided to play around with the registry and found this could be accomplished by creating a couple keys and dwords.
Using regedit, I drilled down to : HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Internet Settings\ZoneMap
I created a new key called: EscDomains and inside that another key for the ServerName
This is used when enhanced security is enabled for IE.
Inside this key, I created two new DWORDS : http and https and set both to 2 which signifies Trusted Site.
Not knowing why Enhanced Security was in use for this server, I decide to create a couple more entries in case somebody decided to disable it.
The two new keys went in the ZoneMap\Domains: company.com\servername
Obviously you change that to your domain name and the name of the server.
Inside the servername key I created the same two dwords as before.
After that I tested the access and the users could get the login screen without modifying IE.
Granted not the best solution and caution should be used but it solved my issue.
Information used to research this:
techdork 