how can I disable IE access for a user in Win 7 PRO ?

how can I disable IE access for a user in Win 7 64-bit Pro ?
nevyana2006Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

senadCommented:
what do you mean exactly?what is his role on the machine?
0
TheBDPSr. Sys EngineerCommented:
Add a rule in windows firewall to block all inbound traffic for internet explorer. Then Lock windows firewall out via Group Policy.
0
nevyana2006Author Commented:
i was hoping to disable execute access to iexplorer.exe thru file security settings. Weirdly these are showing up but disabled for administrator ?
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

ibrahim52Team LeaderCommented:
0
ibrahim52Team LeaderCommented:
0
BitsBytesandMoreCommented:
Follow the steps in http://www.sevenforums.com/tutorials/5023-windows-features-turn-off.html and make the user a standard user.
Bits ...
0
nevyana2006Author Commented:
let me try it bu ti think it disables certain features for all users and i'd like to isolate a user
0
_Commented:
If it is a machine with a single user, you could block its IP address or MAC Address in the router.
0
senadCommented:
if he is a member of admin group then you can forget the whole thing.
if he is a standard user then yes ....
0
Malli BoppeCommented:
Can't you change the NTFS permissions on the iexplore.exe file.
What are you trying to acheive by doing this.he can still  install and different browser.
0
yodabugCommented:
Make a NoIE group. Put the user in the group. Give that group deny permissions to the IE executable. Unless this person has admin access it is done.

Or use the Local Security Policy to deny access to IE: This sets permissions globally for the whole computer and not just the one user on that computer.

On the PC that is used by the user your want to deny access to IE:

secpol.msc=>expand software restriction policies=>Right click Additional Rules and select "new path rule"=> browse to iexplore.exe and select it=> make sure disallowed is showing in the security drop down selector=> apply, ok, done.
0
yodabugCommented:
oh yeah, if you've never set a software policy on the computer then you will not see additional rules folder until you right click Software Restriction Policies and select New Software Restriction Policies
0
nevyana2006Author Commented:
it won't let me change the NTFS permissions on the iexplorer.exe file - and I am trying to do that with an admin account.
0
nevyana2006Author Commented:
there are more users on that pc and some need access to IE.
0
nevyana2006Author Commented:
periferals are restricted and if IE is disabled they won't be able to install another browser.
0
yodabugCommented:
I would record the groups and user permissions on iexplore.exe b4 doing any of this, and reset those groups and permissions manually after I was done taking ownership and making my own edits/additions.

Ok install Firefox first. (in case the user in question needs a browser)
Take ownership of iexplore.exe.

http://www.blogsdna.com/2159/how-to-take-ownership-grant-permissions-to-access-files-folder-in-windows-7.htm

Then open the permissions on iexplore.exe, click edit, check the box for full access next to administrators group, apply ok, close, re-open, add the NOIE users group, and then select it, remove all permissions and select the deny bit. Done again.

Done.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
nevyana2006Author Commented:
ok, so I changed the ownership to admin user and then was able to edit the access permissions of the other users to that iexplorer.exe file. thank you.
0
yodabugCommented:
You are quite welcome.

Is this matter resolved and/or closed?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.