Hidding Internet Options 2

[RollinX]

Im trying to find out if there is a way that you can hide the internet options that are available in the tools menu inside IE so my users cant change the homepage?

 

[SIG357]

I honestly have no idea how you would do it, but in your search to do so there's one thing to remember. The
Tools | Internet Options menu option is basically a shortcut to the Internet Options applet in Control Panel. So it's kind of a double-edged sword. If you can figure out how to lock it down in Control Panel, you'll be fine. But if you figure out how to disable that menu item in IE, you have to remember that it can still be accessed through Control Panel

 

[ackka]

They actually do this at the school that i go to... It should be possible if you look into modifying the system policies on Windows 9x...... You can also look into second party software such as Fortres 101, that blocks this... You can also write a simple batch file that restores the regsitry each time the computer boots....

Like this - this backs it up

@echo on
attrib -s -h -r c:\windows\system.dat
attrib -s -h -r c:\windows\user.dat

copy c:\windows\system.dat c:\backup /y 
copy c:\windows\user.dat c:\backup /y 

attrib +s +h +r c:\windows\user.dat
attrib +s +h +r c:\windows\system.dat

Run this batch file at starup in the autoexec.bat file

attrib -h -s -r c:\windows\user.dat
attrib -h -s -r c:\windows\system.dat

copy c:\backup\user.dat c:\windows /y 
copy c:\backup\system.dat c:\windows /y 

attrib +h +s +r c:\windows\user.dat
attrib +h +s +r c:\windows\system.dat

This should work, it will restore the homepage ever time the computer is restarted.....

later

ackka
ackka@mad.scientist.com

http://home.cyberarmy.com/ackka

http://www.cultdeadcow.com

 

[torner]

Will ackka's batch file solution work to restore other IE settings? Most specifically, I'm interested in the proxy settings.

 

[ackka]

torner, you should also be able to do the same thing if you simple backup the c:\program files\Internet Explorer each time the machine boots using a simple batch file. If you have access to a Novell server you can put this batch file and the Internet Explorer backup on the Novell Server so that only a person with certain access rights can modify the batch file.
here is link to all of the batch files

http://www.angelfire.com/electronic/ackka/random/batch.zip

good luck

ackka
ackka@mad.scientist.com

http://home.cyberarmy.com/ackka

http://www.cultdeadcow.com

 

[gunawandjon]

May I know which registry entry that controls the Internet Option menu?

Djon

 

[reghakr]

The fix for the Homepage is listed below:

Backup the registry and/or export the following keys:
go to Start>Run, type regedit. Navigate to:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

ight-click on the Explorer key, choose new>DWORD value, name it NoFolderOptions. Right-click on that and give it a value of 1.

Here';s other IE restrictions, the same scenario, DWORD values set to 1:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
"NoBrowserClose" ; Disable the option of closing Internet Explorer.
"NoBrowserContextMenu" ; Disable right-click context menu.
"NoBrowserOptions" ; Disable the Tools / Internet Options menu.
"NoBrowserSaveAs" ; Disable the ability to Save As.
"NoFavorites" ; Disable the Favorites.
"NoFileNew" ; Disable the File / New command.
"NoFileOpen" ; Disable the File / Open command.
"NoFindFiles" ; Disable the Find Files command.
"NoSelectDownloadDir" ; Disable the option of selecting a download directory.
"NoTheaterMode" ; Disable the Full Screen view option.


HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Advanced"=dword:00000001 ;disables any changes under Advamced Tab
*"Autoconfig"=dword:00000001 ;disables Auto Configuration under Dial-up settings
"Profiles"=dword:00000001 ;disables Profile Assistant button
"Accessibility"=dword:00000001 ;disables all options under Accessibility
"HomePage"=dword:00000001 ;prevents any changes regarding your homepage
"links"=dword:00000001 ;disables changing links colors
"Languages"=dword:00000001 ;disables any Language changes
"Certificates"=dword:00000001 ;disables Certificates & Publishers buttons
"Wallet"=dword:00000001 ;disables Microsoft Wallet
"History"=dword:00000001 ;disables Days to keep & Clear History Button
"Colors"=dword:00000001 ;disables changing of colors
"Fonts"=dword:00000001 ;disables changing fonts
"Ratings"=dword:00000001 ;disables Content Advisor
"Cache"=dword:00000001 ;disables changing amount of space & moving of folder
"GeneralTab"=dword:00000001 ;removes entire tab
"SecurityTab"=dword:00000001 ;removes entire tab
"ContentTab"=dword:00000001 ;removes entire tab
"ConnectionsTab"=dword:00000001 ;removes entire tab
*"Connection Settings"=dword:00000001 ;disables all connection settings (should be used with Connwiz Admin Lock)
"ProgramsTab"=dword:00000001 ;removes entire tab
"AdvancedTab"=dword:00000001 ;removes entire tab
*"Messaging"=dword:00000001 ;prevents changing E-Mail, Newsgroups, or Internet Call options
*"CertifPers"=dword:00000001 ;prevents changing Certificate options
"CertifSite"=dword:00000001 ;removes the Personal tab from Certificate manager
*"Certificates"=dword:00000001 ;removes the Publisher button from the Content tab
"SecChangeSettings"=dword:00000001 ;prevents changing Security Levels for the Internet Zone
"SecAddSites"=dword:00000001 ;prevents adding Sites to ANY zone
"FormSuggest"=dword:00000001 ;disables AutoComplete for forms
"FormSuggest Passwords"=dword:00000001 ;prevents Prompt me to save password from being displayed
"Connwiz Admin Lock"=dword:00000001 ;disables the Internet Connection Wizard
"CalendarContact"=dword:00000001 ;prevents changes to Calendar and Contact list
"Settings"=dword:00000001 ;prevents any changes to Temporary Internet Files
"ResetWebSettings"=dword:00000001 ;disables the Reset web Setting button
*"Check_If_Default"=dword:00000001 ;disables Perform Security Check before dialing on Connections tab
*"Proxy"=dword:00000001 ;prevents changes to proxy server settings

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"NoFileOpen"=dword:00000001 ;disables Open command on File menu, CTRL+O, and CTRL+L.
"NoFileNew"=dword:00000001 ;disables CTRL+N
"NoBrowserSaveAs"=dword:00000001 ;disables Save and Save As on the File menu.
"NoBrowserOptions"=dword:00000001 ;Disables Internet Options on the View menu (disables changing browser settings).
"NoFavorites"=dword:00000001 ;No Favorites menu, adding to favorites, or organizing favorites.
"NoSelectDownloadDir"=dword:00000001 ;Prevents user from being able to select download folder by not displaying the Save As dialog box when a file is downloaded.
"NoBrowserContextMenu"=dword:00000001 ;disables HTML context menu.
"NoBrowserClose"=dword:00000001 ;disables ALT+F4, File>Close and the X
"NoFindFiles"=dword:00000001 ;disables the F3 key
"NoTheaterMode"=dword:00000001 ;Disables the F11 key
"NoViewSource"=dword:00000001; disables View>Source from the IE menu.

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions]
"NoAddressBar"=dword:00000001 ;hides the Address bar
"NoToolBar"=dword:00000001
"NoLinksBar"=dword:00000001 ;hides the Links bar

reghakr

 

[gunawandjon]

Thx reghakr

 

[kevinnaomi]

Just a quick question for reghakr.
You listed a great deal of reg entries above.
I am using Win NT4 and these entries do not exist.
I am trying to do the same thing.
Any idea of how to do it in NT 4?

 

[FaiTHLeSS]

You could download IEAK Internet Explorer Admin Kit, from Microsoft website and repack your own copy of IE the way you want it to be then deploy it throughout your network. It will let you customise setting within IE.

hth Im the little person who likes to help..
Feel free to contact me..
the_wizard_king@hotmail.com

 

[kevinnaomi]

Yeah, already thought about that. I was just hoping there was an easier way to change 1 setting rather than reinstall IE on 150 computers.

 

[FaiTHLeSS]

You could write a logon script that would check what IE version is installed, if the version doesnt match the one you have made then it will install the new one. Just have then new copy on a network drive where the script could pull it from and install it silently in the background when the user logs on.

hth Im the little person who likes to help..
Feel free to contact me..
the_wizard_king@hotmail.com

 

[kevinnaomi]

Thanks for the advice.
All users have exactly the same version. We are not planning any upgrades in the near future.
Also, IE installs normally require reboot when setup is finish. If I could get it to install and not reboot but still work fine, that would be great. I could use it then and, as you suggested, script it to install.
Is there any way to install IE and not reboot?