Disable Internet Explorer for users? 1

[e46fan]

Does anyone know a way to disable the use of IE for selective users in a domain on a W2k server? I was thinking there might be a way using the domain security policy.

 

[Seaspray0]

There's a way to hide it from the desktop in group policy.

If you don't find a way to dissable it, you could use group policy to set the IE settings to a proxy server that doesn't exist for those users... as well as lock down IE configuration menus. Those users may be able to start it, but not get anywhere with it on the internet.

ISA server would help alot in controlling who gets to the internet and where.

 

[MattWray]

You can also disable it within a GPO also. Add the appropriate users to the OU. Right-click it and choose properties and Group Policy tab. Create a new one. Once inside the policy snap-in,
User Configuration-> admin templates-> system-> enable the Don't run specified windows apps. Put in iexplore.exe and Internet Explorer will not run....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[e46fan]

mattwray: thanks for the help, but I'm not seeing the "don't run specified windows apps" as a policy option under User config> admin templates> system>. I followed along until then though. Am I missing something?

Thanks again!

 

[MattWray]

I'm not sure why you don't see it. It is there. To clarify, you have everything expanded and system highlighted? You should see it in the right pane, between Run only allowed Windows Apps and Disable autoplay. 3rd up from the bottom....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[Seaspray0]

star to mattwray for finding the setting. I found it with no problems.

Yea, typing the url into explorer works. Perhaps dissabling it with mattwray's post to stop access to IE and then setting up a bogus proxy address in the IE settings will stop you from using Explorer as a web browser.

Of course, once the word get around the company that you can remove Internet Explorer usage from a user you should see alot less violations of company policy.

 

[MattWray]

And I know very few of my users that are aware that they can use Outlook or Windows Explorer to access the Internet. To most at my workplace, Internet Explorer is not IE, it is the Internet... When you disable it, you will get calls that the Internet is down.

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[AV1611]

You could also of course go to the 2k Workstations if that is what they are and log in as Administrator and disable the .exe for IE. This would keep them from using it period.

AV

 

[e46fan]

mattwray: Sorry I went back and did find it...my brain is toast this week, getting married Saturday.

thanks for all the help, all good suggestions and comments.

 

[MattWray]

Congrats! That can be just a little bit stressfull.....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com