IE Toolbars

[melonhawg]

Hi, I've noticed these IE "tool/search" bars are popular. MSN, Google, Yahoo, .Is there a way to prevent users from installing or changing it?



Always remember that you are unique, just like everyone else.

 

[bcastner]

I personally like Google toolbar.

If you disable all Active-X controls in Tools, Internet Options, Security, Internet Zone, the toolbars cannot be installed or activated. The easiest way to do this is to set the Custom Level of Security on this Zone to High. You will then need to lock these changes from user edits:

1. One way is to prevent changes in the Security tab:

Open notepad and copy/paste the below as lock_ie_security.reg

********** start copy/paste below this line
REGEDIT4

[HKEY LOCAL MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"Security HKLM only"=dword:00000001
"Security options edit"=dword:0000000
"Security zones map edit"=dword:0000000

************* end copy/paste above this line

2. An alternative is to prevent the user use of Internet Options completely:

Open notepad and copy/paste the below as lock_ie.reg

********** start copy/paste below this line
REGEDIT4

[HKEY LOCAL MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoBrowserOptions"=dword:00000001

************* end copy/paste above this line

You can push the .reg file to users through the logon script. Add the line:

regedit/s registry_filename.reg

 

[bcastner]

If you install Service Pack 2 then the use of the Group Policy Editor (gpedit.msc) simplifies things enormously.

See:

http://www.microsoft.com/technet/security/prodtech/winclnt/secwinxp/xpsgapa.mspx

 

[melonhawg]

Thanks bcastner, but won't this effect my company's Intranet-home-page which uses Active-X.



Always remember that you are unique, just like everyone else.

 

[bcastner]

Internet Options, Security, has settings for five Zones, and the settings are independent of each other.

 

[melonhawg]

Thanks, most computers are old and can't handle Outlook for email so we go to "

http://email.company.com".

Won't this security setting affect this?


Always remember that you are unique, just like everyone else.

 

[bcastner]

Put the site into "Trusted Sites" under the Security Tab.

 

[melonhawg]

Thanks bcastner, works like a charm!

Always remember that you are unique, just like everyone else.

 

[bcastner]

You are very welcome. Glad you got the issue sorted.

Bill