IE

To add a domain to an IE zone using GPO for all users on a computer without locking the settings, you can do the following:

Open the GPO that you are adding the setting to. The GPO needs to apply Machine Settings to the machines in question