How to block installing IE toolbars through Group Policy

We would like to block users from downloading and installing any IE toolbars through GPO.
Can you guys help me out?

Thanks.
LVL 12
InfamusAsked:
Who is Participating?
 
ms-proCommented:
You can use Roaming Mandatory User Profiles
Roaming user profiles allow users to move between different computers and maintain the same environment and preference settings. A roaming mandatory user profile is a preconfigured user profile that you assign to users. Because users cannot change a roaming mandatory profile, using this type of profile ensures that these user profiles remain at a manageable size. Additionally, you can assign one mandatory profile to all users who require identical desktop configurations. This allows you to change the desktop environments for all those users by changing only one profile.

http://www.windowsdevcenter.com/pub/a/windows/2006/10/10/implementing-mandatory-roaming-profiles.html?page=2


0
 
blimsterCommented:
GPO

User Configuration > Administrative Templates > Internet Explorer > Internet Control Panel > Advanced Page > Allow third-party browser extensions

Disable to stop any third party tool bars from being used in  IE
 
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
InfamusAuthor Commented:
If I disable Allow Third-party browser extensions, other things that is needed also gets blocked. Such as flash or acrobate.  I just need tool bars blocked.
0
 
blimsterCommented:
I'm pretty sure that it doesn't stop flash add-ons (not too sure about acrobat)

as far as i know it only stops addons that effect the browser interface(ie toobars and buttons)

Have you tried it? (i can't be bothered -_-)

but yeah i'm pretty sure flash would work
0
 
InfamusAuthor Commented:
I tried it and it doesn't work.  Toolbars are still there.
0
 
blimsterCommented:
humm... i've ad afew issues with GPO before when the non policy registry setting takes presedence over the policy settings.

try a custom adm template.

remeber to uncheck "Only show policy settings that can be fully managed" in the filtering.
CLASS USER
 
CATEGORY "Windows Components"
CATEGORY "Internet Explorer"
 
POLICY "Enable Third Party Browser Extensions"
KEYNAME "SOFTWARE\Microsoft\Internet Explorer\Main"
VALUENAME "Enable Browser Extensions"
VALUEON "yes"
VALUEOFF "no"
END POLICY
 
END CATEGORY;
END CATEGORY;
 
[strings]

Open in new window

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.