Hiding Internet Explorer 2

[djacobus]

I have a PC that will be used by 2 people on different shifts. One person I am trying to lock everything down on. I seem to be able to lock everything down except for the IE explorer. I need IE for a couple of apps to run on so I cannot remove it and I want IE available to the other user when they log on. I just need to be able to hide the IE or deny access to the IE for this one user. Any ideas?

 

[bcastner]

How about leaving the icon alone on the desktop, but that user cannot access the internet? Use IPSec policy:

http://www.petri.co.il/block_web_browsing_with_ipsec.htm

 

[2ffat]

Have you looked at the policies for that user? Log on at that user, then run "gpedit.msc." This will bring up a screen with your option. You can just change the user options for that user.



James P. Cottingham

^{There's no place like 127.0.0.1.
There's no place like 127.0.0.1.}

 

[bcastner]

2ffat,
Could you be more specific?

I do not see a Group Policy that would do what djacobus would like to do.

 

[TekTippy4U]

2ffat;
wouldn't you need to log on as the restricted user then choose RunAs and use a mmc snapin (gpedit.msc?) and log into the snapin using the Adminstrator Username and Password? - atleast? otherwise the restricted user would be able to "un-do" what you've done using the exact same steps.

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[gpalmer711]

If you are using NTFS as your File System then you could use the permissions to Deny the user access to iexplorer.exe

Another alternative would be Proxy Settings, as these are per user, you can set a false proxy for the user who cannot have access. Then using gpedit.msc you can prevent the user being able to change the proxy.

User Configuration > Administrative Templates > Windows Components > InterNet Explorer

Greg Palmer
Free Software for Adminstrators

http://www.palmersoft.co.uk

 

[kmusik]

gpalmer,
I have have used the proxy settings method to block Internet access. Can you be more specific on how to block acces using permissions with XP Pro:
?log in as admin
?log in as user
??

Thanks

 

[gpalmer711]

First Give the user that you want to restrict, Admin Rights and then log in as that user.

Start > Run > gpedit.msc

Browse to User Configuration > Administrative Templates > Windows Components > InterNet Explorer

Set "Disable Changing of Proxy Settings" to enabled.

You may also want to change other settings while there.

Log out as that user and then remove the admin rights from that user.

Greg Palmer
Free Software for Adminstrators

http://www.palmersoft.co.uk

 

[bcastner]

I really think you should look at my suggestion much earlier to use IPSec polic. If you really want to use the false proxy approach:

Use the ability to create a logon script, and the ability to use regedit to import registry settings to accomplish this.

1. Create the registry scripts needed:

. Internet_on.reg

Open your registry and find the key below.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

Export this key as Internet_on.reg

. Internet_off.reg

Change the value of "ProxyEnable" and set it to "1". Change the value of "ProxyServer" and set it to an IP address and port that is invalid on your network such as "10.0.0.1:5555" (i.e. "IPort").

By changing these settings Internet access will be disabled for any applications that rely of the Microsoft proxy server information such as Internet Explorer, Microsoft Office, Opera browser, Mozilla, etc.

Export the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

again as Internet_off.reg


2. In the logon script for users you either place the on or off registry key file with the following syntax:

regedit /s Internet_on orp/b] Internet_off.reg

Note: The change will take effect immediately for any new browser windows, existing Internet Explorer sessions will not be affected until the browser is closed and reopened.

3. If you have relatively clever users, they could change these settings, unless you stop them.

To stop users from modifying the proxy settings add these restrictions to disable changes to the Internet configuration.

Find or create the key below:

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]

Create two DWORD values named "Connection Settings" and "Connwiz Admin Lock" and set them both to "1".

Make certain you create and export a second registry key set where both values are set to 0 or you will not be able to change your connection settings either!