How to disable Internet Explorer Connection Settings...

Hello gurus,

I'm trying to disable on Internet Explorer (any version > 5.0) the Connection Settings (on the Tools -> Internet Options Menu) for my wide user network. I have a Domain Controller on WinNT sp6 and use security policies for each group of users. What I would like to acomplish is to disable (gray-font) the Internet Options submenu, so that user cannot modify anny Internet Explorer Settings. Is there any way this can be done? How?

Thanks....
juangalavisAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

CrazyOneCommented:
Well i have no idea if NT 4 has the Group Policy but I do know you can do that in Win2000 and XP.

Start > Run gpedit.msc

User Configuration > Administrative Components > Windows Components > Internet Explorer
Double click "Disable Internet Connection Wizard"


MS explaination

Prevents users from running the Internet Connection Wizard.

If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog box appears dimmed.

Users will also be prevented from running the wizard by clicking the Connect to the Internet icon on the desktop or by clicking Start, pointing to Programs, pointing to Accessories, pointing to Communications, and then clicking Internet Connection Wizard.

If you disable this policy or do not configure it, users can change their connection settings by running the Internet Connection Wizard.

Note: This policy overlaps with the "Disable the Connections page" policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Connections tab from the interface. Removing the Connections tab from the interface, however, does not prevent users from running the Internet Connection Wizard from the desktop or the Start menu.
NetwerkMercCommented:
What you are going to need is the Internet Explorer Administration Kit and build a custom distribution.  You can pretty much customize just about everything including adding predefined lists of "trusted" and "restricted" sites, content advisor configurations, allow and deny cookie lists.  Very cool.  You can then make profiles, and have a different distribution for each profile based on a single "template" distribution, one for IT, one for users, one for the execs.  You can also define when a given distribution should be used (ie the laptop user at home will use HIS instance of IE and at the office only uses the custom).

per IEAK's help:
"If you are a corporate administrator, you can also use system policies and restrictions to determine whether users can change their connection settings. You can set policies and restrictions in Stage 5 of the Internet Explorer 6 Customization Wizard or through automatic configuration"

http://www.microsoft.com/windows/ieak/default.asp

-Eric
Security and Virus forum moderator
<edited by YensidMod>
NetwerkMercCommented:
Ohh yea...this can prevent them from running the wizard, actually you can do it many ways.  They can run it, but it won't affect the customized distribution.  You WILL want to tighten your user and system GP as well.  But out of the box, this will do it and you can depoy in many ways and supports a full unattended install.  

-Eric
Security and Virus forum moderator
<edited by YensidMod>
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

NetwerkMercCommented:
Status update?
NetwerkMercCommented:
Is this thing on?  Please reply or close the topic.

-Eric
juangalavisAuthor Commented:
Your answers were ok, but did not fullfiled my expectations (or at least I couldn't resolve my problem). I managed to find the solution on this webpage www.solont.com, it's in spanish, but that's my mother language, so it was just great!..... below the solution:

Disabling Connection Settings:
La activación de esta característica impide a los usuarios cambiar la configuración de acceso telefónico. Si se habilita esta opción, el botón Configuración en la ficha Conexiones, en el cuadro de diálogo Opciones de Internet aparecerá atenuado. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\
4.- Cree o configure el valor DWORD decimal Connection Settings a (1)
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Disabling Internet Connection Wizard:
La activación de esta característica impide a los usuarios ejecutar el Asistente para la conexión a Internet. Si se habilita esta opción, el botón Instalación en la ficha Conexiones, en el cuadro de diálogo Opciones de Internet, aparecerá atenuado. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel\
4.- Cree o configure el valor DWORD decimal Connwiz Admin Lock a (1)
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Disabling Advanced Configuration Settigs:
La activación de esta característica impide a los usuarios cambiar la configuración en la ficha Avanzadas en el cuadro de diálogo Opciones de Internet. Si activa esta valor los usuarios no pueden cambiar las configuraciones avanzadas de Internet, tales como seguridad, multimedia e impresión. Los usuarios no pueden activar ni desactivar las casillas de verificación en la ficha Avanzadas. Para activar esta opción siga los pasos enumerados a continuación:
1.- Inicio > Ejecutar > escriba, Regedit.exe y presione Enter.
2.- Ubíquese en la siguiente clave del registro de configuraciones:
3.- HKCU\Software\Policies\Microsoft\InternetExplorer\ControlPanel
4.- Cree o configure el valor DWORD decimal Advanced a (1).
5.- Cierre el editor del registro.
6.- Los cambios surtirán efecto una ves que inicie sesión nuevamente.
La contracción (HKCU\) Se refiere a la clave del registro (HKEY_CURRENT_USER\) que es la clave del usuario concurrente de la maquina local. Este cambio en el registro afecta a todos los usuarios que inicien sesión en la maquina.

Thanx a lot guys..... we are now migrating to w2k and XP, things would be much easier there.....
LunchyCommented:
PAQed, with points refunded (500)

Lunchy
Friendly Neighbourhood Community Support Admin

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.