Solved

Lock Down Internet Explorer 9 Settings

Posted on 2012-03-22
8
1,355 Views
Last Modified: 2012-03-24
Hello All,
I was wondering if there is a way to lock down Internet Explorer SETTINGS.  Such as, hiding the entire "Internet Options" selection in IE?Whether it's through Local Security Policy, registry "hack", parental controls, etc.

I don't want users to be able to change their Home page, trusted sites, etc.

These computers are all Windows 7 Professional 64-Bit.
0
Comment
Question by:ccorino1
  • 3
  • 3
  • 2
8 Comments
 
LVL 8

Accepted Solution

by:
npinfotech earned 400 total points
ID: 37754557
0
 
LVL 10

Assisted Solution

by:abbright
abbright earned 100 total points
ID: 37754616
Here's an overview of the group policy settings that can be used for configuring IE9: http://www.microsoft.com/download/en/details.aspx?id=9409
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754640
The setting in the excel mentioned in line 1185 says: Tools menu: Disable Internet Options... menu option      
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.\n\n\nIf you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.\n\n\nCaution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.\n\n\nAlso, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
0
 

Author Comment

by:ccorino1
ID: 37754735
Thank you both for the replies!

NPINFOTECH - That article looks great, however, it seems I do not have the exact registry key they are refering to. I do not have the "Internet Explorer" key:
My Computer / HKEY_CURRENT_USER / Software / Policies / Microsoft / Internet Explorer
Inside the Microsoft key, I only have SystemCertificates and Windows.  

abbright - This is not on a domain, therefore I do not have Group Policy.  Is there anything in the Local Security Policy that does something similar?
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 8

Assisted Solution

by:npinfotech
npinfotech earned 400 total points
ID: 37754797
you'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1.  

http://www.ehow.com/how_6506926_disable-advanced-internet-options.html
0
 
LVL 8

Expert Comment

by:npinfotech
ID: 37754803
Don't forget to run regedit as an admin =)
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754817
Group policies change the registry, so you can always do that manually, too.
The regkey mentioned above (line 1185) refers to HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions as npinfotech pointed out. There are in fact hundreds of other keys which can be set to configure IE9 just the way you want.
0
 

Author Closing Comment

by:ccorino1
ID: 37761055
The way to remove access to Internet Options from both the registry and Control Panels:<br />1.  From Internet Explorer: You'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1. <br />2. From Control Panels: systemroot%/system32/inetc<wbr /><wbr />pl.cpl file (the Internet Options Control Panel). <br /><br />1. Right-click the file in Explorer and choose "Properties". <br /><br />2. When the "inetcpl.cpl Properties" multi-tabbed dialog box appears, click the "Security" tab.<br /><br />3. Restrict the permissions for particular users as needed.<br /><br />4. Click "OK" to close the dialog box.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

It’s a strangely common occurrence that when you send someone their login details for a system, they can’t get in. This article will help you understand why it happens, and what you can do about it.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now