Skip to main content

Allow Automatic Image Downloads using Trusted Sites & Zones

Trusted Sites, Zones, automatic image download, Outlook

Robert Lanckton avatar
Written by Robert Lanckton
Updated this week

To enable Automatic Image Downloads, configure your software and services to allow images from Cerkl and your unique domains.

Add domains to the Trusted Zone Sites via Group Policy Object (GPO)

By adding our self-hosted domains and your Cerkl provided unique domains to your Trusted Sites via a GPO update, you can enable your Audience member's machines to safely and automatically allow image downloads from emails send via Broadcast.

Combined with your security measures on the Email server and your DMARC configurations, only emails verified as secure will reach your inbox utilizing these domains.

To add domains to the Trusted Sites list via Group Policy Object in the Windows domain environment, follow these steps:

1. Open Group Policy Management Console (GPMC):

  • On a machine with administrative rights and tools, press Windows + R, type gpmc.msc, and hit Enter.

2. Create or Edit a Group Policy Object (GPO):

  • Right-click on the Organizational Unit (OU) to apply a policy, then select Create a GPO in this domain, and Link it here or select an existing GPO to edit.

  • Verify the correct OU(s)

3. Rename the GPO (if creating a new one):

  • Give it a descriptive name, like: "Cerkl Trusted Sites".

4. Edit the GPO:

  • Right-click on the new GPO and select Edit.
    ​

  • Navigate to the Internet Explorer Settings:

    • In the Group Policy Management Editor, go to: User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page.

GPO Edit

6. Configure Trusted Sites:

  • Look for the setting 'Site to Zone Assignment List'.
    ​

  • Double-click it to open its properties.

7. Enable:

  • Select Enabled. In the Show Contents dialog, you can add entries for the sites.

  • Add Cerkl.com and assign it to the Trusted Sites zone by entering the following:

    • Email

      • Value Name: URL, for example, app.cerkl.com

      • Value: 2 (which corresponds to Trusted Sites).
        ​

    • Employee Email (Classic)

      • Value Name: https://img.cerkl.com

      • Value: 2 (which corresponds to Trusted Sites).
        ​

      • Value Name: https://app.cerkl.com

      • Value: 2 (which corresponds to Trusted Sites).
        ​
        If allowed, we recommend including https://*.cerkl.com as well.
        ​

      • Value Name: Your Unique Sendgrid or Link Branded Domain.

      • Value: 2 (which corresponds to Trusted Sites).

For your Custom and Unique Domains, please reach out to your Cerkl Implementation or Success Manager, or reach out to our live chat support team.

8. Apply and Close:

  • Click OK
    ​

  • Close the Group Policy Management Editor.

9. Refresh Group Policy:

  • Wait for the next policy refresh cycle
    ​

  • Or run the command gpupdate /force on a client machine to apply the new policy immediately.

11. Verify the Changes:

  • Check on a client machine to ensure that the domains have been added to the Trusted Sites list.

If you're unsure if this step would resolve your issue, please review the below section to test individual Windows devices:
​

Verify the current Trusted Sites on individual Windows devices

Configuring Trusted Sites/Zones on an individual's computer to confirm these settings allow the images to download. These first steps will allow you to confirm if a GPO update has updated the client machine.

  1. Open Control Panel.

  2. Select Network and Internet.

  3. Click the main heading for Internet Options.

  4. From the Internet Properties Window, Choose the Security tab.

  5. Click Trusted Sites for the zone you want to view.

  6. Click Sites to view a list of current Trusted Sites.

Confirm the following URLs and your Custom and Unique Domains are listed:

For your Custom and Unique Domains, please reach out to your Cerkl Implementation or Success Manager, or reach out to our live chat support team.

Add Trusted Sites to individual Windows device

  1. If not yet added when verifying the above steps, from rhe Trusted sites dialog, follow these steps:
    ​

  2. From the Sites list, in the Add this website to the zone field, input the domains you want to include, then click Add.
    ​

  3. Repeat until you have added all the Cerkl and provided unique domains.
    ​

  4. Click Close
    ​

  5. Under Security level for this zone, confirm the toggle is set to to Medium.
    ​

  6. Click OK.

Confirm Outlook Settings

  1. In Microsoft Outlook, navigate to File > Options > Trust Center.
    ​

  2. In the left navigation panel, navigate to Automatic Download.
    ​

  3. Under Pictures, select the checkbox for Permit downloads from Web sites in this security zone: Trusted Zone.

If you have any questions at all, please don't hesitate to reach out to us at support@cerkl.com or use the support Chat toward the bottom right-hand corner of any cerkl.com page.

Did this answer your question?