hardening / restricting IE to only the essentials - advice requested

From: no-spam (no-spam_at_false-address.net)
Date: 02/27/05 

Date: Sun, 27 Feb 2005 18:41:51 +0000

this is for a PC running XP SP2
with Internet connection, but not on a LAN...

having switched to Firefox for general web use
I'd like to restrict IE to a limited number of sites -
at the moment just the "Windows Update" and "Office Update"
sites - which need to play with Active-X controls

first thought is -
in the IE Security settings - set all of the zones to "High"

add those sites to which I want to allow access,
into the "Trusted Sites" zone - set that to to "High"
then allow prompted Active-X in that zone

hmmm
that seems too easy :|

am I forgetting something ?

is there a decent tutorial on the subject ?

Relevant Pages

  • RE: ERROR 0x80072F76 SOLUTION
    ... "Zone Alarm Security Suite". ... I found that DISABLING NORTON ANTIVIRUS ... > Thank you for contacting Microsoft Windows Update Support. ...
    (microsoft.public.windowsupdate)
  • Re: Windows Updates: Firewall setting for outbound traffic
    ... The trusted zone for Windows Update should be a separate one in your ... Only have one trusted sites zone, and include only the following 3 ... Make sure your firewall allows, at least to the zones above, Win32 ... > outbound traffic from the servers to the internet. ...
    (microsoft.public.windowsupdate)
  • Re: ERROR 0x80072F76
    ... > after a failure cases such as: unchanged, no file, or partial file. ... It was probably put there by the "Automatic Windows Update", not the Windows Update website (which, according to the log, fails to download it anyway). ... > E.g. with WU you would probably be using Internet zone ...
    (microsoft.public.win2000.windows_update)
  • Re: ERROR 0x80072F76
    ... > after a failure cases such as: unchanged, no file, or partial file. ... It was probably put there by the "Automatic Windows Update", not the Windows Update website (which, according to the log, fails to download it anyway). ... > E.g. with WU you would probably be using Internet zone ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft Virtual PC problem w/Zone
    ... >> Are you using an administrator account? ... and make sure none of the Zone or Heartbeat components are ... A Windows Update possibly caused this problem.. ... Also remove unneeded objects in the ActiveX list; ...
    (microsoft.public.games.zone)