Solved

Lock Down Internet Explorer 9 Settings

Posted on 2012-03-22
8
1,368 Views
Last Modified: 2012-03-24
Hello All,
I was wondering if there is a way to lock down Internet Explorer SETTINGS.  Such as, hiding the entire "Internet Options" selection in IE?Whether it's through Local Security Policy, registry "hack", parental controls, etc.

I don't want users to be able to change their Home page, trusted sites, etc.

These computers are all Windows 7 Professional 64-Bit.
0
Comment
Question by:ccorino1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
8 Comments
 
LVL 8

Accepted Solution

by:
npinfotech earned 400 total points
ID: 37754557
0
 
LVL 10

Assisted Solution

by:abbright
abbright earned 100 total points
ID: 37754616
Here's an overview of the group policy settings that can be used for configuring IE9: http://www.microsoft.com/download/en/details.aspx?id=9409
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754640
The setting in the excel mentioned in line 1185 says: Tools menu: Disable Internet Options... menu option      
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.\n\n\nIf you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.\n\n\nCaution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.\n\n\nAlso, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:ccorino1
ID: 37754735
Thank you both for the replies!

NPINFOTECH - That article looks great, however, it seems I do not have the exact registry key they are refering to. I do not have the "Internet Explorer" key:
My Computer / HKEY_CURRENT_USER / Software / Policies / Microsoft / Internet Explorer
Inside the Microsoft key, I only have SystemCertificates and Windows.  

abbright - This is not on a domain, therefore I do not have Group Policy.  Is there anything in the Local Security Policy that does something similar?
0
 
LVL 8

Assisted Solution

by:npinfotech
npinfotech earned 400 total points
ID: 37754797
you'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1.  

http://www.ehow.com/how_6506926_disable-advanced-internet-options.html
0
 
LVL 8

Expert Comment

by:npinfotech
ID: 37754803
Don't forget to run regedit as an admin =)
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754817
Group policies change the registry, so you can always do that manually, too.
The regkey mentioned above (line 1185) refers to HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions as npinfotech pointed out. There are in fact hundreds of other keys which can be set to configure IE9 just the way you want.
0
 

Author Closing Comment

by:ccorino1
ID: 37761055
The way to remove access to Internet Options from both the registry and Control Panels:<br />1.  From Internet Explorer: You'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1. <br />2. From Control Panels: systemroot%/system32/inetc<wbr /><wbr />pl.cpl file (the Internet Options Control Panel). <br /><br />1. Right-click the file in Explorer and choose "Properties". <br /><br />2. When the "inetcpl.cpl Properties" multi-tabbed dialog box appears, click the "Security" tab.<br /><br />3. Restrict the permissions for particular users as needed.<br /><br />4. Click "OK" to close the dialog box.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

742 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question