She closes the editor. Back in GPMC, she right-clicks the GPO and selects Enforced – because the OU containing the Traders has a conflicting WMI filter that might block inheritance.

She’s so tired. Her cursor hovers over OK . But she notices something awful: the drop-down at the top of the Internet Properties window says “Internet Zone” – not Trusted Sites.

She opens a command prompt and runs:

But she can’t just flip it back to Not Configured . Compliance will audit the change on Monday. She needs a surgical fix.

It’s 1:55 AM on a Saturday. Lena, the sole senior systems administrator for a 24/7 financial trading firm, is sitting in her home office in complete darkness except for the glow of three monitors. The helpdesk has been flooded for six hours with a bizarre error: “0x80070005 – Access Denied” popping up on every workstation when users try to access the company’s internal time-tracking web app.

The 2:00 AM GPO

She scrolls to – she sets it to Prompt (not Enable – she’s not a monster).

She documents the change in a change request retroactively (knowing she’ll get yelled at for breaking process). She sets a reminder to remove the “Enforced” flag on Monday after compliance fixes their template. She saves the GPO backup as 2025-03-15_IE_Trusted_Sites_Hotfix .