Lock Down Internet Explorer 9 Settings

Hello All,
I was wondering if there is a way to lock down Internet Explorer SETTINGS.  Such as, hiding the entire "Internet Options" selection in IE?Whether it's through Local Security Policy, registry "hack", parental controls, etc.

I don't want users to be able to change their Home page, trusted sites, etc.

These computers are all Windows 7 Professional 64-Bit.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Here's an overview of the group policy settings that can be used for configuring IE9: http://www.microsoft.com/download/en/details.aspx?id=9409
The setting in the excel mentioned in line 1185 says: Tools menu: Disable Internet Options... menu option      
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.\n\n\nIf you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.\n\n\nCaution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.\n\n\nAlso, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

ccorino1Author Commented:
Thank you both for the replies!

NPINFOTECH - That article looks great, however, it seems I do not have the exact registry key they are refering to. I do not have the "Internet Explorer" key:
My Computer / HKEY_CURRENT_USER / Software / Policies / Microsoft / Internet Explorer
Inside the Microsoft key, I only have SystemCertificates and Windows.  

abbright - This is not on a domain, therefore I do not have Group Policy.  Is there anything in the Local Security Policy that does something similar?
you'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1.  

Don't forget to run regedit as an admin =)
Group policies change the registry, so you can always do that manually, too.
The regkey mentioned above (line 1185) refers to HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions as npinfotech pointed out. There are in fact hundreds of other keys which can be set to configure IE9 just the way you want.
ccorino1Author Commented:
The way to remove access to Internet Options from both the registry and Control Panels:<br />1.  From Internet Explorer: You'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1. <br />2. From Control Panels: systemroot%/system32/inetc<wbr /><wbr />pl.cpl file (the Internet Options Control Panel). <br /><br />1. Right-click the file in Explorer and choose "Properties". <br /><br />2. When the "inetcpl.cpl Properties" multi-tabbed dialog box appears, click the "Security" tab.<br /><br />3. Restrict the permissions for particular users as needed.<br /><br />4. Click "OK" to close the dialog box.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.