?
Solved

Lock Down Internet Explorer 9 Settings

Posted on 2012-03-22
8
Medium Priority
?
1,373 Views
Last Modified: 2012-03-24
Hello All,
I was wondering if there is a way to lock down Internet Explorer SETTINGS.  Such as, hiding the entire "Internet Options" selection in IE?Whether it's through Local Security Policy, registry "hack", parental controls, etc.

I don't want users to be able to change their Home page, trusted sites, etc.

These computers are all Windows 7 Professional 64-Bit.
0
Comment
Question by:ccorino1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
8 Comments
 
LVL 8

Accepted Solution

by:
npinfotech earned 1600 total points
ID: 37754557
0
 
LVL 10

Assisted Solution

by:abbright
abbright earned 400 total points
ID: 37754616
Here's an overview of the group policy settings that can be used for configuring IE9: http://www.microsoft.com/download/en/details.aspx?id=9409
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754640
The setting in the excel mentioned in line 1185 says: Tools menu: Disable Internet Options... menu option      
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.\n\n\nIf you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.\n\n\nCaution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.\n\n\nAlso, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders.
0
Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

 

Author Comment

by:ccorino1
ID: 37754735
Thank you both for the replies!

NPINFOTECH - That article looks great, however, it seems I do not have the exact registry key they are refering to. I do not have the "Internet Explorer" key:
My Computer / HKEY_CURRENT_USER / Software / Policies / Microsoft / Internet Explorer
Inside the Microsoft key, I only have SystemCertificates and Windows.  

abbright - This is not on a domain, therefore I do not have Group Policy.  Is there anything in the Local Security Policy that does something similar?
0
 
LVL 8

Assisted Solution

by:npinfotech
npinfotech earned 1600 total points
ID: 37754797
you'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1.  

http://www.ehow.com/how_6506926_disable-advanced-internet-options.html
0
 
LVL 8

Expert Comment

by:npinfotech
ID: 37754803
Don't forget to run regedit as an admin =)
0
 
LVL 10

Expert Comment

by:abbright
ID: 37754817
Group policies change the registry, so you can always do that manually, too.
The regkey mentioned above (line 1185) refers to HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions as npinfotech pointed out. There are in fact hundreds of other keys which can be set to configure IE9 just the way you want.
0
 

Author Closing Comment

by:ccorino1
ID: 37761055
The way to remove access to Internet Options from both the registry and Control Panels:<br />1.  From Internet Explorer: You'll have to manually create the keys.  in the policies key, create a key called "internet explorer", then inside that key create another key called "restrictions".  then create a dword value inside "restrictions" called "NoBrowserOptions" and set the hexidecimal value to 1. <br />2. From Control Panels: systemroot%/system32/inetc<wbr /><wbr />pl.cpl file (the Internet Options Control Panel). <br /><br />1. Right-click the file in Explorer and choose "Properties". <br /><br />2. When the "inetcpl.cpl Properties" multi-tabbed dialog box appears, click the "Security" tab.<br /><br />3. Restrict the permissions for particular users as needed.<br /><br />4. Click "OK" to close the dialog box.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this blog we highlight approaches to managed security as a service.  We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question