asked on

How to limit users ability to install browser plugins via Group Policy.

Anybody know how to limit users ability to install browser plugins via group policy? Or do I need to use IEAK?

Thanks

This should do it...

Internet Options...
Security
Internet - Custom Level...
Run ActiveX controls and plug-ins = Disable

Then you need to export the security settings
gpedit.msc
User Configuration
Administrative Templates
Windows Components
Internet Explorer
click on Internet Control Panel
(right side) two-click Disable the Security page
Enable
Apply
Ok

spiderfix

ignore the
"Then you need to export the security settings"

shouldn't have posted that part...no edit button ;)

ASKER CERTIFIED SOLUTION

JamesDS

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kenosha

ASKER

James,

That's the exact method I found. Thanks for your confirmation. Although I didn't think to disable the security tab in internet options.

Tony

JamesDS

kenosha
Welcome, disabling the security tab stops users from altering the setting themselves. The GPO would re-apply and overwrite their changes, but by that time they have already installed the plugin - so we need to stop them getting there.

Cheers

JamesDS

kenosha

ASKER

James

Hence the "Disable Automatic Install of Internet Explorer components", correct?

spiderfix

Gee. wish I said that :rolleyes:

kenosha

ASKER

Did I miss something spidefix?

spiderfix

It's like I'm invisible or something.

"Disable Automatic Install of Internet Explorer components" is not going to stop
Java Applets from being installed which is why I gave steps to prevent that as well.
Everything else JamesDS said was a repeat of what I said.

GPO = gpedit.msc