disable downloads 1

[Tek2003]

can sopmeone help me?
I need to disable downloads from internet explorer...is there any way to do it from the server? How can i do it?
Thanks in advance

 

[brontosaurus]

In Group Policy, under User Configuration\windows Settings\Internet Explorer Maintenance\Security\Security Zones and Content Ratings, choose to Import the current security zone settings. Then go to Internet\Custom Level\Downloads\ and set File download to Disable .

 

[Tek2003]

thanks that was what i was looking..

 

[Tek2003]

bronto, i forgot something..this will apply only to Win2k clients , is there a way to do it so win98 clients also have those restrictions?

 

[brontosaurus]

Ouch...I don't know if NT4 type policies provide for this type of thing using a mandatory profile. Here's the registry setting in 2K, maybe you can find something similar to hack in 98...?

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"1803"=dword:00000003

 

[Tek2003]

i looked and yes, NT 4.0 has that. You mean if i modify that value "1803"=dword:00000003 it will apply the same value to all the workstations regardless the OS?

 

[brontosaurus]

It should work on any platform. The 1803 value name is referencing the "File Download" option in IE. The DWORD data value of 3 means "this action is prohibited...."

 

[AlexIT]

Gosh, sometimes someone asks a question about a topic I'd never considered (I usually just block access at the firewall.) Any idea if this can be applied to everyone EXCEPT those belonging to a Security Group called Download?

Or should you create a new OU and have this applied to just those people who are in that OU?

Alex

 

[brontosaurus]

yeah, the OU thing is the way to go for 2K/XP users.

Hey Alex, how would you block just downloading at the firewall? I know how to block HTTP access in general....

 

[Tek2003]

well, bronto, didnt work...I changed the value, but nothing happened, even in the server i can still download, also in the workstations. I went to Options in IE (server), and changed the value to disable, went to the registry and nothing changed in that zone (3)..everything kept with the origianl values...
Seems like there is no way to do it in NT 4.
My question was , i think i posted wrong..if i made the change in the registry on the server (lets say 2000) it will affect the workstations?
Thanks for the help ..at least we tried...

 

[brontosaurus]

nope, changing the server won't affect clients, sorry.