Re: disable install new browser

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/10/04 

Date: Fri, 10 Dec 2004 22:45:52 GMT

Don't let your users be power users or administrators. If you are using XP
Pro you can use Software Restriction Policies to enforce what a user can
install or run on their computer - even local administrator as long as they
don't unjoin the computer from the domain. SRP can be managed for XP pro
computers in a W2K domain. For W2K about the best you can do is to populate
the disallowed Windows applications list in Group Policy under user
configuration/administrative templates/system. You could list the
executables for those browsers, but the user can get around that restriction
if they can rename the executable. --- Steve

"Bruno" <Bruno@discussions.microsoft.com> wrote in message
news:84CE0675-A89E-4F94-A6DB-F88DDA9B4D1E@microsoft.com...
> hi,
> how can i prevent an installation of new browser (like opera, firefox,
> netscape ...).
> We need only IE on our network
> is there a particular GPO (on win2000 server) or a particular registry
> setting ?
>
> thanks
>
> Bruno

Relevant Pages

  • Re: Software Restriction Policy
    ... > How to Start Software Restriction Policies ... > guidelines that are set up by administrators when they run programs. ... > Prevent any files from running on your local computer, ... > The only file types that are affected by certificate rules are those ...
    (microsoft.public.windowsxp.security_admin)
  • Re: network restrictions
    ... administrators as local administrators have the ability to override ... Software Restriction Policies are ... SRP and other Group Policy is easily applied to domain computers. ... "Christopher S. Coviello" wrote in message ...
    (microsoft.public.windowsxp.security_admin)
  • Re: USB Drives
    ... Administrators or else you will have a very difficult time - particularly ... In Windows 2000 you can use Group Policy user ... -- Software Restriction Policies. ... >I would like to create a policy that allows access to data on USB drives, ...
    (microsoft.public.windows.group_policy)
  • Re: Policy template to block MSN Messenger 6.2?
    ... In Windows XP Pro you can use Software Restriction Policies to prevent users ... Configuring your firewall or installing personal firewalls to not allow ...
    (microsoft.public.win2000.group_policy)
  • Cant Change Passwords at WinXP Pro machines in a W2k AD Domain
    ... Our client computers runs Win2000 Pro and WinXP Pro. ... Administrators can't change their password on any of the XP machines! ...
    (microsoft.public.windowsxp.security_admin)