Adding trusted sites to IE via GPO sucks, because it keeps users from adding trusted sites on their own as well. Adding registry keys via login scripts or package deployment just...sucks. It never ...