ie & group policies
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: ie & group policies

  1. #1
    Member
    Join Date
    Mar 2003
    Posts
    30

    ie & group policies

    i was wondering if was possible to disable the view, favs, tools, and help menu in internet explorer via group policies so that a certain dept in my company would have a stripped down version of ie

    clients r running w2k
    i b on w2k adv ser


    any help is appreciated

  2. #2
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    I'm not sure, but I can lend you this tidbit of advice. Upon looking at the options in the 'Tools' menu, i see listed under there Internet Options. If you are trying to disable this option, you may have to do a few other things. There are many different ways to open the Internet Options. Easiest I would say is right clicking the IE icon on desktop and select properties. You can go to the Control Panel to get there, as well as Network Connections.

    I guess what I'm trying to say is that simply disabling these options may not give you the security you need. From what I am getting, is that you don't trust your users very much. In such a case I would go with a Custom Shell. This would effect the whole GUI and pretty much let you customise the access you want your users to have. There are a lot of programs that you could find might be just the solution you are looking for.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

  3. #3
    Senior Member
    Join Date
    Apr 2003
    Posts
    147
    Here are a few links that look quite promissing. All I did was Google for "Internet explorer group policies".

    A VERY formal paper from the NSA in classic government form right down to a few "This page is intentionally left blank" [PDF] www.conxion.com/support/guides/sd-8.pdf]Guide to securing Microsoft internet explorer 5.5 using group policy[/URL] It covers all sorts of win2k and AD stuff.

    There are aparently a few problems with doing group policy with win2k and IE 6 sp 1 detailed here: You cannot manage internet explorer 6 policies on a windows 2000-based computer

    Have you already messed around with the gpedit.msc? Anything you want to mess with should be under User Configuration/Windows Settings/Internet Explorer Maintenance.

    Hope this helps. If you haven't already, go google for it yourself.

    Jon.

  4. #4
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    Toker is right. you need to do a bit more.

    Try using the IEAK. Internet Explorer Admin Kit.

    http://www.microsoft.com/windows/ieak/
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  5. #5
    Senior Member
    Join Date
    Feb 2002
    Posts
    518
    u b on google now...
    r u a sys adm?
    if u r I b scared that u cant type full sentances....
    Remember -
    The ark was built by amatures...
    The Titanic was built by professionals.

  6. #6
    Member
    Join Date
    Mar 2003
    Posts
    30
    I have them on a pretty tight lock down, but the internet is still accessible via tools->show related links->search new. I cannot take the internet away, b/c they need a hand full of sites.

    avenger_jcc,

    i b a jr. sys adm. This was a project that was given to me by the senior network administrator(s). I was just being lazy and not typing full sentences. I apologize for that. I will be more formal when posting on this board.

    UpperCell,

    I have searched via google and I was not able to find anything that was of any use to me, but I think that I am going to check out http://www.microsoft.com/windows/ieak/ and other 'custom shells'

    thank you to all for the advice and tips

    tokeafatty420


  7. #7
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    Originally posted here by tokeafatty420
    I cannot take the internet away, b/c they need a hand full of sites.
    Well, have you ever thought about making those sites available offline? It's Easy as adding a favorite. Incorperate this with an intranet and you wont even need the internet at all. I dunno, just a thought.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

  8. #8
    AO übergeek phishphreek's Avatar
    Join Date
    Jan 2002
    Posts
    4,325
    If they need just a handful of sites, then use a proxy and restrict where they can go.

    Or, block them at the firewall.. to all places except for the sites they need.

    Check out this article:

    http://www.linuxjournal.com/article.php?sid=6807

    You can use squid (open source proxy) with squid guard (open source filter/redirect/etc).
    Quitmzilla is a firefox extension that gives you stats on how long you have quit smoking, how much money you\'ve saved, how much you haven\'t smoked and recent milestones. Very helpful for people who quit smoking and used to smoke at their computers... Helps out with the urges.

  9. #9
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    I came across this a few years ago, we had IE5 and Win NT4.

    There was a standard build deployed across around 14,000 desktops and multiple sites. We used a customised version of IE to do it. my involvement was to test it before deployment, and it certainly worked as far as user workgroups were concerned.

    I was able to get round it by running a browser that fitted onto a 1.44" floppy but IE was pretty secure.

    Some of the other suggestions are interesting though, and I shall have to take them on board.

    Thanks for the thread


  10. #10
    AO French Antique News Whore
    Join Date
    Aug 2001
    Posts
    2,126
    Start - run - Type "gpedit.msc" The Group Policy Windows will pop. Go under User Configuration - Windows Setting - Internet Explorer Maintenance From here, you have all kind of nice info to customizes and retrited IE. This will work for your machine also but is can be apply to Active Directory Domain with the domain group policy. Good Luck!
    -Simon \"SDK\"

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •