用组策略实现域用户访问moss站点不需要账户登录

A client of ours is about to start using a SharePoint 2010 site we developed for them.  The users are being asked to log in every time they try to open or upload a document.  I know how to change settings in their browser so this doesn't happen, but what they really need to do is make this happen in a centralized way, rather than having 150 users worldwide make browser security changes themselves.

So, basically I need to tell the IT staff of a client who is running Active Directory (configuration described below), what changes they need to make to group policies in order to accomplish the same thing as the following two
tasks:

What we need are group policies that accomplish the same thing as you get by doing the following:

Make sure the SharePoint site is part of the Local Intranet zone.  To do
this:

Open Internet Explorer (IE7 or IE8)

Go to http://share.bsr.org

Using the menu bar, select Tools / Internet Options

Click on the Security tab

Click on Local Intranet, and then the Sites button

Click on Advanced

If http://share.bsr.org is not listed, click the Add button to add the website to the Local Intranet Zone

Press Close, then OK, then OK again

We also want to customize the security level for the Local Intranet zone so that User Authentication Logon is Automatic, with current user name and password .  To do this:

Open Internet Explorer (IE7 or IE8)

Go to http://share.bsr.org

Using the menu bar, select Tools / Internet Options

Click on the Security tab

Click on Local Intranet, and then the Custom Level button

Scroll all the way to the bottom.

Make sure the radio button for Logon, under User Authentication is set to "Automatic logon with current user name and password"

Press OK, then OK again

We need Windows DC Tools gpmc.msc.

【说明】

On Windows 2003, we need download it from http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887 , then install it.

On Windows 2008, we could use it directly.