RE: IE questions

From: Sergey V. Gordeychik (gordey_at_infosec.ru)
Date: 05/07/04

  • Next message: Zack Schiel: "Relative Security Provided by Cached Domain Credentials?" 
    Date: Fri, 7 May 2004 13:58:09 +0400
To: "Andy Pham" <apham2575@hotmail.com>, <focus-ms@securityfocus.com>

    One of solution is to disable ActiveX in Internet Zone and Enable its in
    Trusted Sites zone. You can manage list of Trusted Sites via Group
    Policy and add new sites on user requests.
    Another good solution - use IE "My Computer" security zone hardening
    (http://support.microsoft.com/default.aspx?scid=kb;EN-US;833633)

    Hope this help.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Zack Schiel: "Relative Security Provided by Cached Domain Credentials?"

    Relevant Pages

    • RE: [Full-Disclosure] RE: COELACANTH: Phreak Phishing Expedition
      ... Yes in fact Trusted Sites and Intranet Sites ... privileges can be gained through this vulnerability. ... You can't replicate this with most other servers because the Host header ... security zone it should use to render the HTML. ...
      (Full-Disclosure)
    • Re: Internet explorer site to zone assignment not behaving correctly
      ... policy, so the entire organization gets the same list. ... they just call us and we add it to trusted sites. ... site is now showing in the Internet zone. ... group policy, because this was the only place it would take effect: ...
      (microsoft.public.windows.group_policy)
    • Re: problems with downloading.
      ... >I have my a restricted user acocunt that i use normally on my machine(Windows ... If i add a site to my trusted sites list it works fine. ... BTW Medium is Default Level for the Internet zone. ... > checked and there is no policy in place that i am forgetting about. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: Site to Zone Assignment List
      ... I would like to have a specific domain added to the Intranet Zone, ... messing with the users custom settings. ... > the user can no longer add their own trusted sites? ... you can add trusted site via Domain Group Policy and thus do ...
      (microsoft.public.win2000.group_policy)
    • Re: 0x800A1391
      ... Try adding the following sites to the IE Trusted Sites zone ... it's Patti MacLeod, MS-MVP. ... |>>> Add button next to the Add this Web site to the zone box to add the ...
      (microsoft.public.windowsupdate)