Re: Disable Internet Explorer
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 3 Nov 2006 15:42:33 -0600
It is pretty futile to try and disable internet access by not allowing a
user access to IE as they still may be able to access via other ways such as
URLs in a Word document. The best solution is to use a firewall that can
firewall rules that include users/groups if you are describing an Active
Directory domain such as Microsoft ISA. If you are talking about one or a
few computers take a look at the PortsLock personal firewall that can
different firewall configuration based on the logged on user account.
Another possibility is to logon to the user accounts, configure a bogus
proxy server via IE connections settings, and then make sure that the user
can not access the proxy settings via Group Policy or registry mod. See the
second link below for more info on how to do that.
Steve
http://www.portslock.com/
http://articles.techrepublic.com.com/5100-1009_11-5838360.html?tag=nl.e101
<spam_only_please@xxxxxxxxxxx> wrote in message
news:1162587172.387103.147280@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I want to disable IE for users, but allow an administrator to use it. I
thought that a policy and the "runas" command would do the trick, but I
seem to be wrong. Can someone lead me in the right direction on how to
do that- or at least the same result of disallowing internet access
except for admins without having to switch xp users? The Norton
firewall program has a setting but it is easy to defeat. The machine
has a cable internet connection.
This failed: Local Security Policy- Software Restriction Policy-
Additionall Rules- path rule=C:\Program Files\Internet
Explorer\iexplore.exe option=disallowed- then enforcement = Apply
Software Restriction Policies to : All users except local
administrators
Then starting IE is disabled(obviously)- I want to open it using Runas-
(admin- pass) but that doesn't work either. The service "secondary
logon" is running. Shouldn't the enforcement option allow the runas?
.
- Follow-Ups:
- Re: Disable Internet Explorer
- From: spam_only_please@xxxxxxxxxxx
- Re: Disable Internet Explorer
- References:
- Disable Internet Explorer
- From: spam_only_please@xxxxxxxxxxx
- Disable Internet Explorer
- Prev by Date: Re: Simple File Sharing in XP Pro
- Next by Date: Re: WinXP SP2 won't install since Oct Security Updates??
- Previous by thread: Disable Internet Explorer
- Next by thread: Re: Disable Internet Explorer
- Index(es):
Relevant Pages
|