Solved

How to disable Internet Explorer Connection Settings...

Posted on 2003-11-28
8
1,450 Views
Last Modified: 2013-12-04
Hello gurus,

I'm trying to disable on Internet Explorer (any version > 5.0) the Connection Settings (on the Tools -> Internet Options Menu) for my wide user network. I have a Domain Controller on WinNT sp6 and use security policies for each group of users. What I would like to acomplish is to disable (gray-font) the Internet Options submenu, so that user cannot modify anny Internet Explorer Settings. Is there any way this can be done? How?

Thanks....
0
Comment
Question by:juangalavis
8 Comments
 
LVL 44

Expert Comment

by:CrazyOne
ID: 9841183
Well i have no idea if NT 4 has the Group Policy but I do know you can do that in Win2000 and XP.

Start > Run gpedit.msc

User Configuration > Administrative Components > Windows Components > Internet Explorer
Double click "Disable Internet Connection Wizard"


MS explaination

Prevents users from running the Internet Connection Wizard.

If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog box appears dimmed.

Users will also be prevented from running the wizard by clicking the Connect to the Internet icon on the desktop or by clicking Start, pointing to Programs, pointing to Accessories, pointing to Communications, and then clicking Internet Connection Wizard.

If you disable this policy or do not configure it, users can change their connection settings by running the Internet Connection Wizard.

Note: This policy overlaps with the "Disable the Connections page" policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Connections tab from the interface. Removing the Connections tab from the interface, however, does not prevent users from running the Internet Connection Wizard from the desktop or the Start menu.
0
 
LVL 1

Expert Comment

by:NetwerkMerc
ID: 9849461
What you are going to need is the Internet Explorer Administration Kit and build a custom distribution.  You can pretty much customize just about everything including adding predefined lists of "trusted" and "restricted" sites, content advisor configurations, allow and deny cookie lists.  Very cool.  You can then make profiles, and have a different distribution for each profile based on a single "template" distribution, one for IT, one for users, one for the execs.  You can also define when a given distribution should be used (ie the laptop user at home will use HIS instance of IE and at the office only uses the custom).

per IEAK's help:
"If you are a corporate administrator, you can also use system policies and restrictions to determine whether users can change their connection settings. You can set policies and restrictions in Stage 5 of the Internet Explorer 6 Customization Wizard or through automatic configuration"

http://www.microsoft.com/windows/ieak/default.asp

-Eric
Security and Virus forum moderator
<edited by YensidMod>
0
 
LVL 1

Expert Comment

by:NetwerkMerc
ID: 9849474
Ohh yea...this can prevent them from running the wizard, actually you can do it many ways.  They can run it, but it won't affect the customized distribution.  You WILL want to tighten your user and system GP as well.  But out of the box, this will do it and you can depoy in many ways and supports a full unattended install.  

-Eric
Security and Virus forum moderator
<edited by YensidMod>
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 1

Expert Comment

by:NetwerkMerc
ID: 10005347
Status update?
0
 
LVL 1

Expert Comment

by:NetwerkMerc
ID: 10249821
Is this thing on?  Please reply or close the topic.

-Eric
0
 

Author Comment

by:juangalavis
ID: 10250582
Your answers were ok, but did not fullfiled my expectations (or at least I couldn't resolve my problem). I managed to find the solution on this webpage www.solont.com, it's in spanish, but that's my mother language, so it was just great!..... below the solution:

Disabling Connection Settings:
La activación de esta característica impide a los usuarios cambiar la configuración de acceso telefónico. Si se habilita esta opción, el botón Configuración en la ficha Conexiones, en el cuadro de diálogo Opciones de Internet aparecerá atenuado. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\
4.- Cree o configure el valor DWORD decimal Connection Settings a (1)
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Disabling Internet Connection Wizard:
La activación de esta característica impide a los usuarios ejecutar el Asistente para la conexión a Internet. Si se habilita esta opción, el botón Instalación en la ficha Conexiones, en el cuadro de diálogo Opciones de Internet, aparecerá atenuado. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\
4.- Cree o configure el valor DWORD decimal Connwiz Admin Lock a (1)
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Disabling Advanced Configuration Settigs:
La activación de esta característica impide a los usuarios cambiar la configuración en la ficha Avanzadas en el cuadro de diálogo Opciones de Internet. Si activa esta valor los usuarios no pueden cambiar las configuraciones avanzadas de Internet, tales como seguridad, multimedia e impresión. Los usuarios no pueden activar ni desactivar las casillas de verificación en la ficha Avanzadas. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel
4.- Cree o configure el valor DWORD decimal Advanced a (1).
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Thanx a lot guys..... we are now migrating to w2k and XP, things would be much easier there.....
0
 
LVL 2

Accepted Solution

by:
Lunchy earned 0 total points
ID: 10284378
PAQed, with points refunded (500)

Lunchy
Friendly Neighbourhood Community Support Admin
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now