I would tell them to pursue it since, at some level, somebody has rights to modify group policies, right?!? Have them take a look here (https://community.spiceworks.com/topic/450809-cant-add-local-intranet-or-trusted-sites-to-ie) and if that doesn't work, go back to @JohnHoyt's step...