Re: internet explorer questions

From: Steven L Umbach (n9rou_at_attbi.com)
Date: 05/05/03


Date: Mon, 05 May 2003 03:25:49 GMT


          You would need to use group policy to hide the address bar and
restrict users from being able to add it back. However all that does is hide
the drives. Ultimately you need to use ntfs permissions to control writing
to a drive. If users are members of users group only and you have changed
ntfs permissions on root drive to list/read/execute, then about the only
place they could write to is the folders in their profile unless other
folders already exist with write permissions. You can also disable file
downloading via Internet Explorer by changing setting in custom level for
web content zones. However that may not stop downloading if other web
applications are installed or can be installed by user. A firewall that can
control inbound and outbound traffic can stop a lot of undesired downloading
also by ftp, chat, and file sharing programs. For example a firewall could
be configured to allow only outbound ports 80,443,25,and 110 to the
internet. If you really need to lock down a computer you could install a
personal firewall on it like Kerio where port usage can be restricted to a
particular application. For example I have my laptop set to allow port 80
outbound access from iexplore.exe only. A firewall restriction like that in
addition to the other rules and disabling downloads via IE would make it
extremely difficult for anyone to download files from the internet. Kerio
allows you to password protect access to change any firewall
configuration. --- Steve

"Giuliano" <giulianozorzi@katamail.com> wrote in message
news:b93jr9$f5fq4$1@ID-41937.news.dfncis.de...
> Hi,
> I need to disable the local drives browsing from internet explorer. I
need
> to forbid the user to write (ie: downloading files from the internet) on
> local disks. is it possible ?
>
> tia
>
> giuliano
>
>



Relevant Pages

  • Constant activity my connection
    ... dial up connection and prior to a few days ago was using XP's firewall. ... After downloading a critical update for IE 6 this weekend I now find that ... Turned off XP firewall and installed basic Zone Alarm. ... program accessing the internet is Generic Host Process Win32/svchost.exe. ...
    (comp.security.firewalls)
  • Re: Constant activity my connection
    ... > dial up connection and prior to a few days ago was using XP's firewall. ... > After downloading a critical update for IE 6 this weekend I now find that ... > program accessing the internet is Generic Host Process Win32/svchost.exe. ...
    (comp.security.firewalls)
  • Re: Constant activity my connection
    ... > dial up connection and prior to a few days ago was using XP's firewall. ... > After downloading a critical update for IE 6 this weekend I now find that ... > program accessing the internet is Generic Host Process Win32/svchost.exe. ...
    (comp.security.firewalls)
  • Generic Host Process Win32 problem
    ... dial up connection and prior to a few days ago was using XP's firewall. ... After downloading a critical update for IE 6 this weekend I now find that ... Turned off XP firewall and installed basic Zone Alarm. ... program accessing the internet is Generic Host Process Win32/svchost.exe. ...
    (microsoft.public.windowsxp.help_and_support)
  • Firewall vs LAN
    ... >firewall and the mapped drive is accessible again. ... Cable Internet Service Provider. ... to tell about people who share files and map drives ... Robotics, Netgear, DLink. ...
    (microsoft.public.windowsxp.general)