More IE restrictions here:
Here's the entire reg script to lock down Internet Explorer. I have removed diable registry tools so you people don't get locked out. I'd put a shortcut to Regedit on the desktop. This is for Windows 2000, for Win98, change the first line to REGEDIT4.
I would suggest editting the file in Notepad and change the 00000001 entries to 00000000, so you have an instant undo policy. The NoDrives value should also be set to 0, the 4 means the c: drive is not seen.
==============BEGIN CUT==================
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop]
"NoAddingComponent"=dword:00000001
"NoChangingWallpaper"=dword:00000001
"NoCloseDragDropBands"=dword:00000001
"NoComponents"=dword:00000001
"NoDeletingComponents"=dword:00000001
"NoEditingComponents"=dword:00000001
"NoMovingBands"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32]
"NoFileMRU"=dword:00000001
"NoBackButton"=dword:00000001
"NoPlacesBar"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=hex:95,00,00,00
"EditLevel"=dword:00000000
"NoSaveSettings"=hex:00,00,00,00
"DisableRegistryTools"=dword:00000000
"NoStartBanner"=hex:00,00,00,00
"CDRAutoRun"=hex:00,00,00,00
"NoBandCustomize"=dword:00000001
"NoStartMenuSubFolders"=dword:00000001
"ClassicShell"=dword:00000000
"NoCommonGroups"=dword:00000001
"RestrictRun"=dword:00000000
"NoNetConnectDisconnect"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoNavButtons"=dword:00000000
"NoToolbarCustomize"=dword:00000001
"NoRecentDocsHistory"=dword:00000000
"NoFavoritesMenu"=hex:01,00,00,00
"NoRecentDocsMenu"=hex:01,00,00,00
"NoRun"=dword:00000001
"NoContextMenu"=dword:00000001
"Btn_Back"=dword:00000000
"Btn_Forward"=dword:00000000
"Btn_Stop"=dword:00000000
"Btn_Refresh"=dword:00000000
"Btn_Home"=dword:00000000
"Btn_Search"=dword:00000000
"Btn_History"=dword:00000002
"Btn_Favorites"=dword:00000002
"Btn_Folders"=dword:00000000
"Btn_Fullscreen"=dword:00000000
"Btn_Tools"=dword:00000000
"Btn_MailNews"=dword:00000002
"Btn_Size"=dword:00000000
"Btn_Print"=dword:00000000
"Btn_Edit"=dword:00000002
"Btn_Discussions"=dword:00000002
"Btn_Cut"=dword:00000000
"Btn_Copy"=dword:00000000
"Btn_Paste"=dword:00000000
"Btn_Encoding"=dword:00000002
"SpecifyDefaultButtons"=dword:00000001
"Btn_Media"=dword:00000002
"NoSetTaskbar"=dword:00000001
"NoActiveDesktop"=dword:00000001
"NoExpandedNewMenu"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoViewContextMenu"=dword:00000001
"NoWinKeys"=dword:00000001
"NoControlPanel"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoShellSearchButton"=dword:00000001
"NoSMHelp"=dword:00000000
"NoWindowsUpdate"=dword:00000001
"NoTrayContextMenu"=dword:00000001
"NoSetFolders"=dword:00000001
"NoNetHood"=dword:00000001
"NoInternetIcon"=dword:00000001
"NoFind"=dword:00000001
"NoDesktop"=dword:00000000
"NoDrives"=dword:00000004
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
"NoClose"=dword:00000000
"NoNetSetup"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=dword:00000001
"DisableChangePassword"=dword:00000001
"DisableLockWorkstation"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WinOLDApp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000001
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{645FF040-5081-101B-9F08-00AA002F954E}]
@="Recycle Bin"
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Connection Settings"=dword:00000001
"Connection Wizard"=dword:00000001
"Advanced"=dword:00000001
"Profiles"=dword:00000001
"Accessibility"=dword:00000001
"HomePage"=dword:00000001
"links"=dword:00000001
"Languages"=dword:00000001
"Certificates"=dword:00000001
"Wallet"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"Fonts"=dword:00000001
"Ratings"=dword:00000001
"Cache"=dword:00000001
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Messaging"=dword:00000001
"CertifPers"=dword:00000001
"CertifSite"=dword:00000001
"SecChangeSettings"=dword:00000001
"SecAddSites"=dword:00000001
"FormSuggest"=dword:00000000
"FormSuggest Passwords"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"CalendarContact"=dword:00000001
"Settings"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"NoBrowserClose"=dword:00000000
"NoBrowserBar"=dword:00000000
"NoBrowserContextMenu"=dword:00000001
"NoBrowserOptions"=dword:00000001
"NoBrowserSaveAs"=dword:00000000
"NoFavorites"=dword:00000001
"NoFileNew"=dword:00000001
"NoFileOpen"=dword:00000001
"NoFindFiles"=dword:00000001
"NoHelpMenu"=dword:00000001
"NoOpeninNewWnd"=dword:00000000
"NoNavButtons"=dword:00000000
"NoPrinting"=dword:00000001
"NoSelectDownloadDir"=dword:00000000
"NoTheaterMode"=dword:00000001
"NoViewSource"=dword:00000001
"RestGoMenu"=dword:00000001
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars]
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions]
"NoAddressBar"=dword:00000000
"NoLinksBar"=dword:00000000
"NoToolbar"=dword:00000000
"NoToolbarOptions"=dword:00000001
============END CUT================
To lock it down even more, you can download Resource Hacker and grey out toolbar commands by editting the browselc.dll file.. Here's a dpownload link:
reghakr