Link to home
Start Free TrialLog in
Avatar of jefftsnyder
jefftsnyder

asked on

IE question

Just wondering if anyone knows a way to disable the "internet options..."  choice in the Tools menu in Internet Explorer. I am trying to lock down the setting for IE without 3rd party software to all domain account users.

Thanks!

Avatar of ACz
ACz
Flag of United States of America image

As far as I know , you can have this policy only in Windows 2000.

Tools menu: Disable Internet Options... menu option
User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser menus

Description
Prevents users from opening the Internet Options dialog box from the Tools menu in Internet Explorer.

If you enable this policy or do not configure it, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.

If you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.

 Caution

This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.

Related Policies

Also, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
Avatar of msice
msice

Yes for sure! Create a Group Policy - add that group to the Group Policy and edit the policy settings for IE under Admin Templates -> Internet Explorer -> Browser Menu -> Enable Tools menu: Disable Internet Options... menu option    
Give it 15 min or so and when that group logs on - no Internet Options in the menu :)
Because users can make these changes in Start > Control Panel > Internet Options as mentioned by ACz, you're much better off to disallow specific features.

Here's how to do this, assuming you're using Active Directory group policy.

Walk over to the domain controller, login and run Start -> Programs -> Administrative Tools -> Active Directory Users and Computers.

Right-click on your domain (likely somename.local) and select properties.

Click on the Group Policy tab and double-click Default Domain Policy.

Browse to User Configuration > Windows Settings > Internet Explorer Maintenance and select those features you wish to disable / fix, for example Connection > Proxy Settings.

Similarly, you may find what you're looking for under Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel (for example, 'Disable the Connections page').

If you don't feel like waiting and want to check the results of these changes, run 'gpupdate /force' on a winXP machine or secedit /refreshpolicy on win2k machines (use secedit /? for particulars).
Because users can make these changes in Start > Control Panel > Internet Options as mentioned by ACz, you're much better off to disallow specific features.

Here's how to do this, assuming you're using Active Directory group policy.

Walk over to the domain controller, login and run Start -> Programs -> Administrative Tools -> Active Directory Users and Computers.

Right-click on your domain (likely somename.local) and select properties.

Click on the Group Policy tab and double-click Default Domain Policy.

Browse to User Configuration > Windows Settings > Internet Explorer Maintenance and select those features you wish to disable / fix, for example Connection > Proxy Settings.

Similarly, you may find what you're looking for under Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel (for example, 'Disable the Connections page').

If you don't feel like waiting and want to check the results of these changes, run 'gpupdate /force' on a winXP machine or secedit /refreshpolicy on win2k machines (use secedit /? for particulars).
Because users can make these changes in Start > Control Panel > Internet Options as mentioned by ACz, you're much better off to disallow specific features.

Here's how to do this, assuming you're using Active Directory group policy.

Walk over to the domain controller, login and run Start -> Programs -> Administrative Tools -> Active Directory Users and Computers.

Right-click on your domain (likely somename.local) and select properties.

Click on the Group Policy tab and double-click Default Domain Policy.

Browse to User Configuration > Windows Settings > Internet Explorer Maintenance and select those features you wish to disable / fix, for example Connection > Proxy Settings.

Similarly, you may find what you're looking for under Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel (for example, 'Disable the Connections page').

If you don't feel like waiting and want to check the results of these changes, run 'gpupdate /force' on a winXP machine or secedit /refreshpolicy on win2k machines (use secedit /? for particulars).
Ugh.  Sincere apologies for the multiple postings.
ASKER CERTIFIED SOLUTION
Avatar of modulo
modulo

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial