Search <book_title>...

Enterprise Vault™ Installing and Configuring

Last Published: 2018-04-09

Product(s): Enterprise Vault (12.3)

Publishing Enterprise Vault server details to USGCB-compliant computers

The United States Government Configuration Baseline (USGCB), formerly known as the Federal Desktop Core Configuration (FDCC), is a list of recommended security settings for general-purpose microcomputers that are connected directly to the network of a United States government agency. If you have applied USGCB group policy objects (GPO) to Windows computers, users cannot change local intranet zone settings in Internet Explorer. As a result, users need to enter authentication credentials each time they access Enterprise Vault. For example, users would be prompted for credentials when they archive or retrieve an item.

This section describes how to add the Enterprise Vault server details to the USGCB Internet Explorer GPO. When the GPO is refreshed, the Enterprise Vault server details are added to the local intranet zone on users' computers. You must ensure that the Enterprise Vault server details are correct, because settings in the GPO take precedence over user settings.

To publish Enterprise Vault server details to USGCB-compliant computers

Log on to the domain controller computer using an administrator account with permission to modify and publish GPOs.
Open the Group Policy Object Editor.
Select the USGCB group policy object that applies Internet Explorer settings to the Windows computers.
In the Group Policy Object Editor, navigate to the following section:
Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page
Right-click Site to Zone Assignment List, and select Properties.
Select Enabled, if it is not already selected, and then click Show to enter the required zone assignments.
Click Add.
In the box Enter the name of the item to be added, type the name of the Enterprise Vault server.
In the box Enter the value of the item to be added, type 1.
This maps the server name to the intranet zone.
In the same way, add all the Enterprise Vault server names to the list and map them to the intranet zone. The list should include all the Enterprise Vault server aliases. For an Enterprise Vault server that has the name SRV1 and the alias EVSERVER1, you would add the following to the Site to Zone Assignment List:
```
Value Name: evserver1.mycorp.local
Value: 1
Value Name: srv1
Value: 1
```
When you have finished adding Enterprise Vault server names to the list, click OK.
On the Site to Zone Assignment List Properties page, click Apply.
When the policy is next refreshed, the changes to the GPO are applied to the Windows computers.
On one of the users' computers, you can verify that the Enterprise Vault server names have been added to the local intranet sites:
- Log on to the computer as a standard user.
- Open Internet Explorer.
- Click Tools > Internet options > Security > Local Intranet > Sites > Advanced.
- The Enterprise Vault server names should be listed in the websites.