Dissallowing downloading from IE

[baldhead]

Is there any way to dissallow users to download files using Internet Explorer? I am on a domain and looked through group policy but the closest I saw to this was the security settings on what the user can view ("Security zones and content ratings"). What have you guys done in trying to achieve this, or what advice can you give me on dissallowing downloading?

thanks
baldhead

 

[ecobb]

We force all of our users through proxy, which we have set not to allow downloading.



Hope This Helps!

Ecobb
Beer Consumption Analyst

"My work is a game, a very serious game." - M.C. Escher

 

[JFBouchard]

Hi, we have disabled the downloads within the security zones and disable the modifications of the zones. All via system policies (poledit) not group policies.

The users can browse the internet but can't download anything. We've done this on our public computers.



Hope this helps. Please let know if this resolve your issue

Jeff

 

[baldhead]

JFBouchard,

How do you centralize this? Or did you have to go around to each machine and modify via poledit? Could you shed some more light on how I can set this up?

Ecobb,

I thought about this but am not sure I want to go this route. thanks.

 

[JFBouchard]

Hi, you copy your xpconfig.pol in the shared netlogon (\\domain controller\netlogon) directory (replicate this folder to all domain controllers).

At logon time, every computer will automatically apply the system policies.

Also ensure that the computers are configured to receive policies:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update

updatemode (DWord)
0= no policies
1 (default)= \\domain controller\netlogon
2= custom path or server (\\server\custom share)



Hope this helps. Please let know if this resolve your issue

Jeff

 

[JFBouchard]

Ho, I almost forgot: disable changes in security zones also via system policies.

Hope this helps. Please let know if this resolve your issue

Jeff