Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1381
  • Last Modified:

Lock Down Internet Explorer 9 Settings

Hello All,
I was wondering if there is a way to lock down Internet Explorer SETTINGS.  Such as, hiding the entire "Internet Options" selection in IE?Whether it's through Local Security Policy, registry "hack", parental controls, etc.

I don't want users to be able to change their Home page, trusted sites, etc.

These computers are all Windows 7 Professional 64-Bit.
0
ccorino1
Asked:
ccorino1
  • 3
  • 3
  • 2
3 Solutions
 
abbrightCommented:
Here's an overview of the group policy settings that can be used for configuring IE9: http://www.microsoft.com/download/en/details.aspx?id=9409
0
 
abbrightCommented:
The setting in the excel mentioned in line 1185 says: Tools menu: Disable Internet Options... menu option      
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.\n\n\nIf you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.\n\n\nCaution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.\n\n\nAlso, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
ccorino1Author Commented:
Thank you both for the replies!

NPINFOTECH - That article looks great, however, it seems I do not have the exact registry key they are refering to. I do not have the "Internet Explorer" key:
My Computer / HKEY_CURRENT_USER / Software / Policies / Microsoft / Internet Explorer
Inside the Microsoft key, I only have SystemCertificates and Windows.  

abbright - This is not on a domain, therefore I do not have Group Policy.  Is there anything in the Local Security Policy that does something similar?
0
 
npinfotechCommented:
you'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1.  

http://www.ehow.com/how_6506926_disable-advanced-internet-options.html
0
 
npinfotechCommented:
Don't forget to run regedit as an admin =)
0
 
abbrightCommented:
Group policies change the registry, so you can always do that manually, too.
The regkey mentioned above (line 1185) refers to HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions as npinfotech pointed out. There are in fact hundreds of other keys which can be set to configure IE9 just the way you want.
0
 
ccorino1Author Commented:
The way to remove access to Internet Options from both the registry and Control Panels:<br />1.  From Internet Explorer: You'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1. <br />2. From Control Panels: systemroot%/system32/inetc<wbr /><wbr />pl.cpl file (the Internet Options Control Panel). <br /><br />1. Right-click the file in Explorer and choose "Properties". <br /><br />2. When the "inetcpl.cpl Properties" multi-tabbed dialog box appears, click the "Security" tab.<br /><br />3. Restrict the permissions for particular users as needed.<br /><br />4. Click "OK" to close the dialog box.
0

Featured Post

Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now