Windows Forum

Ask something
Discussion Locked

Internet Explorer Security

0 helpful
7 replies

by gel

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,
is there anybody know how to protect the setting of the Internet Explorer same as the policy editor in windows 9X?
My users keep changing the proxy setting,startup page and etc. and i wanted to restrict them doing that.

Thanks..

7 replies

by curacao_dejavu

Hi,

look at this registry settings from windowsguides.com

http://www.winguides.com/registry/display.php/797/

The features available within the Internet Explorer control panel (Tools -> Internet Options) can be individually managed and disabled using this tweak.

Open you registry and find the key below.

Create a new DWORD value for each restriction from the list below, set the value to equal "1" to enable the restriction or "0" to disable it.

"Accessibility" - disables alloptions under Accessibility
"GeneralTab" - removes General tab
"SecurityTab" - removes Security tab
"ContentTab" - removes Content tab
"ConnectionsTab" - removes Connections tab
"ProgramsTab" - removes Programs tab
"AdvancedTab" - removes Advanced tab
"CertifPers" - prevents changing Certificate options
"CertifSite" - removes the Personal tab from Certificate manager
"SecChangeSettings" - prevents changing Security Levels for the Internet Zone
"SecAddSites" - prevents addingSites to ANY zone
"FormSuggest" - disables AutoComplete for forms
"FormSuggest Passwords" - prevents Prompt me to save password from being displayed
"Connwiz Admin Lock" - disables the Internet Connection Wizard
"Settings" - prevents any changes to Temporary Internet Files
"ResetWebSettings" - disables the Reset web Setting button
You may need to restart Windows for the changes to take effect.

Settings
Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\
Internet Explorer\Control Panel]
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable restriction, 1 = enable restriction)

regards,

Lepold

by joncr

The first answer is right. this is best done with a domain policy so you can specify what users can do what. If you download the Internet Explorer Admin Kit from MS and extract the inetres.adm file it can be used with poledit to add to your domain policy.

This works for me.

This discussion is closed to new replies.