Adding trusted sites to IE via GPO sucks, because it keeps users from adding trusted sites on their own as well. Adding registry ...