Windows Forum

Ask something
Discussion Locked

Stoping windows explorer web browsing

0 helpful
7 replies

by powellc02

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi, I'm kinda stuck on this. I work for a school and whilest we were running NT4 it was simple to stop the kids going on the net when we didn't wan't them to, with kludgy batch files and acls. Stop them starting IE and you've stoped them getting on to the web. However when we moved to 2K some of the kids found that if you open ANY explorer window and bung in a URL you'll get out on to the web. It doesn't even list it as IE in the processes.

What I'm asking is, is there any way to remove the web capabilities of windows explorer?

7 replies

by r. a. caluste

web explorer is tightly integrated with windows explorer in windows 2000. if you are connected via router to a server and you want to control access to the internet in particular, you need microsoft ISA Server 2000. from here you can set up policiesthat can allow or disallow access to the internet, to a particular content, for a certain account (or group), for a particular time of the day.

i believe you can also use any other proxy servers to have all connections to the internet pass through the proxy server and you can limit access from there.

hope this helps.

by allen

simple, just clost all the TCP/IP ports except the ports that you might need like 80 or 21 and you will stop IE from accessing the web.

by mike mullins

Below are the exact registry settings and their values:

[HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings]
"ProxyHttp1.1"=dword:00000000
"ProxyServer"="ftp=0.0.0.0:80;gopher=0.0.0.0:80;http=0.0.0.0:80;https=0.0.0.0:80"
"ProxyOverride"="Do not use proxy server for addresses beginning with:" (ie.. http://www.msn.com;http://www.searchwin2000)
"ProxyEnable"=dword:00000001
"ProxyOverrideText"="Separate multiple addresses with a semi-colon."
[HKEY_CURRENT_USER/Software/Policies/Microsoft/Internet Explorer/Control Panel]
"Proxy"=dword:00000001

I have specified 0.0.0.0:80 as the proxy server, any Internet access will be immediately rejected. By specifying this address for every type of protocol, the proxy address will not be displayed in the proxy settings tab. The last entry in the registry file prevents users from changing the proxy settings in the Control Panel or in Internet Explorers Internet Options.

Other settings that can be used to furtherrestict user interference:

[HKEY_CURRENT_USER/Software/Policies/Microsoft/Internet Explorer/Restrictions: Each DWORD value must be set to 1 to be enabled or 0 to restrict.
"NoFileOpen"= Disables open command on file menu, CTL+O, and CTL+L.
"NoFileView"= Disables FileNewWindow, CTL+N"
"NoBrowserSaveAs"= Disables SAVE and SAVE AS in the file menu.
"NoFavorites"= No Favorites menu, adding to favorites, or organizing favorites.
"NoSelectDownloadDir"= Prevents user from being able to select a download folder by not displaying the Save As dialog box when a file is downloaded.
"NoBrowserContextMenu"= Disables HTML context menu when right clicking web page to get IE properties.
"NoBrowserClose"= Disables ALT+F4.
"NoTheaterMode"= Disables F11 key.
"NoBrowserOptions"= Disables Internet Options on the tools menu (disables changing browser settings).

Good luck,
0bytes

This discussion is closed to new replies.