Can't access Internet Tools Options

[jj]

I am on a machine at home, running WinXP Pro, with SP2 applied, with Admin
privileges. Sometime within the last two weeks, I have somehow been denied
access to the Internet Tool Options in Internet Explorer 6. The following
error message appears when I try to access it:

"The operation has been canceled due to restrictions in effect on this
computer. Please contact your system administrator."

I am the system administrator, and I haven't done anything to the group
policy (except what I have done in trying to remedy this situation). When I
first went in to the system details, there were essentially no policies set,
though it appears to me (and you can look at the snapshot file of the group
policy application I've attached) that there is some sort of scripting file
accessing a URL that may be affecting this situation. I'm not an expert
however, so I may be misreading that file.

I ran a search through the Knowledge Base, and didn't find any specific
information on a situation like this that would be of assistance, though the
specific error message produced some hits.

I tried running the system config utility for startup files, and looking
through the registry entries for Internet Explorer, as well, and could find
nothing of significance, by the way.

Does anyone have any ideas? Is this a new vulnerability and/or method of
spyware?

Thank you in advance for any assistance!

 

[Ricky]

If you have used SpyBot's Immunize tool, see this:
http://www.safer-networking.org/index.php?page=faq&detail=24

Otherwise try here

http://www.dougknox.com/xp/scripts_desc/xp_fix_inetoptions_restrictions.htm

 

[jj]

Thanks -- that did it! I appreciate the assistance!

 

[Ricky]

You're welcome..glad it helped.

Thanks -- that did it! I appreciate the assistance!

 

[Guest]

Thank you, Thank you, Thank you...One of my administrators used spybot to
lock ie and couldn't remember how he did it. Your link did the trick for us.
Thanks Bob

 

[Ricky]

You're welcome..glad it helped.

Thank you, Thank you, Thank you...One of my administrators used spybot to
lock ie and couldn't remember how he did it. Your link did the trick for
us.
Thanks Bob

 

[huey]

HI:
I have been having the same problem on Windows 2000 SP4 with only me as
Administrator. I have tried what was suggested and have even edited parts
of the Registry using instructions found by Googling etc. Nothing will
'unlock' this. Can anyone offer further suggestions short of reinstalling
Windows 2000? Thank you.
huey

 

[Jan Il]

Hi huey

You might try the following and see if it helps:

Use Regedit.exe and search for NoBrowserOptions and remove it.
It is most likely to be here (but not necessarily)
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions
If you are unfamiliar with Regedit, then ensure you know how to
restore your Registry in case of error and it is a good to export any
key before deleting.

Check the startup (Start-Run-MSCONFIG-Startup tab) for any unknown
items if it is reset on reboot.

also..

A Security Update/patch has been known to cause this, so check the
following:

NOTICE: Besure to backup your Registry before making any changes:

This could be the follwing key in the registry:-
HKEY_Current_User\Software\Policies\Internet Explorer
If the IE key exists, delete it, log off and back on
again and restriction will be gone

You may need to do a search of the Registry to find the exact location on
your machine.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[huey]

Hi Jan:
Thanks for the information. I had done this previously and rechecked the
registry. The key doesn't come back and there is nothing in msconfig that
shouldn't be there. Do you know which patch could have caused this?
Perhaps I could uninstall that patch specifically? I have been tearing my
hair out for the past few months over this and have searched MS and other
information sites to no avail. Help!
huey

 

[Jan Il]

Hi huey

No...I am sorry, I don't recall which patch it was. Did you try the SpyBot
Immunization as suggested to see if that would help? See here:
http://www.safer-networking.org/index.php?page=faq&detail=24

A few other things I can think of are:

Re-enable Internet Options:
Line 268. Restore All Tabs under Internet Options
http://www.kellys-korner-xp.com/xp_tweaks.htm

Can you access the Internet Options from the Control Panel? If so, you can
check to see if any settings have been changed and reset them.

or....

Try here:
http://www.dougknox.com/xp/scripts_desc/xp_fix_inetoptions_restrictions.htm

also...

This is often the after-effect of spyware or other Internet nasty. Try the
following and see if these steps will help:

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

If this does not resolve the problem, then try a repair and see if that will
restore IE.

Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[huey]

Hello:
Thanks for all the information. I will reply to each under its section, if
that's OK for you to follow?
huey

Hi huey
No...I am sorry, I don't recall which patch it was. Did you try the SpyBot
Immunization as suggested to see if that would help? See here:
http://www.safer-networking.org/index.php?page=faq&detail=24

None of the boxes were ever checked under the IE Options

A few other things I can think of are:
Re-enable Internet Options:
Line 268. Restore All Tabs under Internet Options
http://www.kellys-korner-xp.com/xp_tweaks.htm

I've run this before - no change.

Can you access the Internet Options from the Control Panel? If so, you can
check to see if any settings have been changed and reset them.
There is no Internet Options listed in Control Panel. Remember this is

Windows 2000, not XP. Could this be the problem?

Try here:
http://www.dougknox.com/xp/scripts_desc/xp_fix_inetoptions_restrictions.htm
I've also run this - same results

also...
This is often the after-effect of spyware or other Internet nasty. Try the
following and see if these steps will help:>
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

I use Spybot, AdAware, and the new MS Antispyware. All report a clean
system.

If this does not resolve the problem, then try a repair and see if that will
restore IE.
According to MS's site this applies to Windows XP - article 318378 . I

can't find any information regarding Windows 2000. Would this be safe to
run on 2000? I don't want to lose everything else too.

Hope this helps

I appreciate your time. Thanks again.

 

[Jan Il]

Hi huey

Hello:
Thanks for all the information. I will reply to each under its section,
if
that's OK for you to follow?
huey

I will also answer in line to lessen confusion...........

None of the boxes were ever checked under the IE Options
OK.
I've run this before - no change.
OK.
Windows 2000, not XP. Could this be the problem?

Yes..it should be there. I also have Windows 2000 SP4 on my machine and I
just checked and there is an Internet Options in my Control Panel. Unless
something has completely removed it, it should be there in your Control
Panel as well.

OK.
I use Spybot, AdAware, and the new MS Antispyware. All report a clean
system.

That is not all there is to scumware. There are other types of malware,
parasites, worms and Trojans and a variety of variants of those. The
programs above are not programmed to detect or remove these types of
scumware. You also need to run the CWShredder, and most importantly, the
HiJackThis program and post the log for analysis by the experts to see what
is on your system. If you have not run these two programs, then you cannot
be certain that your system is clean. If it is not fully cleaned then you
likely won't be able to resolve your problem, and nothing other than a
complete wipe of your hard drive, will do so. Thus, at this point oou
should make sure that you have run all the necessary detection and removal
tools at your disposal.

Download, install and run these two programs. Run them both in Safe Mode.
You can post back here with the link to the forum where you post your HJT
log and we can monitor and help if necessary from here as well.

CWShredder: Free
http://www.majorgeeks.com/download4086.html

How to download and install HiJackThis:
http://www.bleepingcomputer.com/forums/topict309.html

Please DO NOT post your log to this newsgroup, but to the HiJackThis Support
Forums below:
http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
the AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.php?f=30
or Bleeping Computer Forum
http://www.bleepingcomputer.com/forums/forum22.html
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums. Please
follow all posting instructions carefully to avoid having your log deleted
or ignored.

can't find any information regarding Windows 2000. Would this be safe to
run on 2000? I don't want to lose everything else too.

Ignore this and use the following:

Here are the restore instructions for Windows 2000. You can try this
repair, however, if your system is not fully cleaned, it may not resolve the
problem:

How To Repair Windows 2000

Windows 2000 step by step repair instructions:
http://www.windowsreinstall.com/install/win2k/repairw2k/page1.htm

How to perform an in place upgrade or 2000 system repair.
http://www.techspot.com/vb/showthread.php?threadid=8356

Difference between Manual and Fast repair
http://support.microsoft.com/?kbid=238359

You only need to uninstall those Service Packs that were installed *after*
installing IE6. You will have to go to the Windows Update and reinstall all
the necessary updates


Hope this helps

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[huey]

Hi Jan:
Thanks for the instructions. I won't have time to do them tonight but will
follow all your suggestions ASAP, and will post back. Again, thank you for
your time. I appreciate it.
huey

 

[Robert Aldwinckle]

....

Yes..it should be there. I also have Windows 2000 SP4 on my machine and I
just checked and there is an Internet Options in my Control Panel. Unless
something has completely removed it, it should be there in your Control
Panel as well.

Jan,

Clicking that icon should be equivalent to Run...

control inetcpl.cpl


Also, Ramesh has pointed out before that this module
has an entrypoint for DllInstall. I think I have seen him
offer it as a repair for related problem symptoms.

http://groups-beta.google.com/group...a1?q=ramesh+rundll32+inetcpl#a54ad7326d5b93a1

Therefore, provided inetcpl.cpl exists and if that command
doesn't show the complete Internet Properties dialog
something possible and hopefully less invasive
than a Windows Repair would be:

rundll32 /n /i inetcpl.cpl

(The /n is necessary because there is no entrypoint for
DllRegServer.)


Also, there was a procedure in NT4 to rebuild
the Control Panel icon list...

<title>KB173132 - Replacing Missing Control Panel Icons</title>

Hmm... XP's Shell32.dll has that Control_FillCache_RunDLL entrypoint!


Ok. Evidently MSFT are still advising XP users about this:

http://groups-beta.google.com/group...osoft.*.windowsxp&qt_s=Search+Groups&safe=off

(Google Groups search for
Control_FillCache_RunDLL group:microsoft.*.windowsxp
)


Less certainty for Windows2000 though.
Only proof that the entrypoint exists in its Shell32.dll too.

Nevertheless, provided inetcpl.cpl exists, I would try to Run...

rundll32.exe shell32.dll,Control_FillCache_RunDLL

and see if that puts the Internet Options icon back
in his Control Panel.


FYI

Robert Aldwinckle
---

 

[Jan Il]

Hi Robert

...


Jan,

Clicking that icon should be equivalent to Run...

control inetcpl.cpl


Also, Ramesh has pointed out before that this module
has an entrypoint for DllInstall. I think I have seen him
offer it as a repair for related problem symptoms.

http://groups-beta.google.com/group...a1?q=ramesh+rundll32+inetcpl#a54ad7326d5b93a1

Therefore, provided inetcpl.cpl exists and if that command
doesn't show the complete Internet Properties dialog
something possible and hopefully less invasive
than a Windows Repair would be:

rundll32 /n /i inetcpl.cpl

(The /n is necessary because there is no entrypoint for
DllRegServer.)


Also, there was a procedure in NT4 to rebuild
the Control Panel icon list...

<title>KB173132 - Replacing Missing Control Panel Icons</title>

Hmm... XP's Shell32.dll has that Control_FillCache_RunDLL entrypoint!


Ok. Evidently MSFT are still advising XP users about this:

http://groups-beta.google.com/group...osoft.*.windowsxp&qt_s=Search+Groups&safe=off

(Google Groups search for
Control_FillCache_RunDLL group:microsoft.*.windowsxp
)


Less certainty for Windows2000 though.
Only proof that the entrypoint exists in its Shell32.dll too.

Nevertheless, provided inetcpl.cpl exists, I would try to Run...

rundll32.exe shell32.dll,Control_FillCache_RunDLL

and see if that puts the Internet Options icon back
in his Control Panel.


FYI

Robert Aldwinckle

Yes..I see how this would make a difference. I was mainly curious to see if
the problem of access to the Internet Options was only related to IE, and
perhaps the OP might be able to access the Internet Options via the back
door, so to speak. If so, it might be possible to check settings and
perhaps make changes to rectify the problem. view of the fact the icon was
indeed missing from the OP's Control Panel, when I knew it should be there
for 2002 SP4, prompted me to think that may have somehow had been removed.
I have known situations where Control Panel icons have been removed or
disabled by IT. Such is the case at San Diego trolley where I formerly
worked. The IT disabled or removed all but 3 icons in the Control Panel.
Users can not even change the settings of their own mouse, or the display of
their own monitor. Thus, my next thoughts were to have the OP check that,
in case they had somehow changed something by accident while logged on as
Administrator that would have caused them to lose access to the Internet.

Thus, are the two situations related to the over all problem? The fact that
the OP does not have the Icon for the Internet Options in the Control Panel
and also can't access them via IE? It would seem to be the case. Would
restoring the Icon to the Control Panel then make the Internet Options
available in IE? I ask as I have not encountered such a problem before,
where the Internet Options were not available in IE, and the icon was also
missing from the Control Panel, and am not sure how closely related the two
are, although, it would seem that what affects one would/could affect the
other.

Thank you very much for the additional input and explanation. I really
appreciate it.

Jan

 

[Robert Aldwinckle]

Hi Robert ....

....
Yes..I see how this would make a difference. I was mainly curious to see if
the problem of access to the Internet Options was only related to IE, and
perhaps the OP might be able to access the Internet Options via the back
door, so to speak. If so, it might be possible to check settings and
perhaps make changes to rectify the problem. view of the fact the icon was
indeed missing from the OP's Control Panel, when I knew it should be there
for 2002 SP4, prompted me to think that may have somehow had been removed.
I have known situations where Control Panel icons have been removed or
disabled by IT.

Agreed. I suspect that either the inetcpl.cpl module is missing
or it is damaged. You are correct that it could just have been disabled
but you have already done tests to discount that idea and Huey's
description indicates that he is a standalone user though I admit
that I may be assuming too much thinking of him as an owner too.

....

Thus, my next thoughts were to have the OP check that,
in case they had somehow changed something by accident while logged on as
Administrator that would have caused them to lose access to the Internet.

I didn't get any sense that there was a connectivity problem.
BTW notice that Huey is an Other Poster but not Opening Poster.

Thus, are the two situations related to the over all problem? The fact that
the OP does not have the Icon for the Internet Options in the Control Panel
and also can't access them via IE? It would seem to be the case.

Yes! Try an experiment? Start FileMon filtering on inetcpl
Then do separately (so the timestamps for each test are evident)
1. Run... control inetcpl.cpl
2. Click on Internet Options icon in Control Panel
3. Press Alt-T,O in IE

Hmm... I answered your question I think but created a bunch
more for myself...

Would restoring the Icon to the Control Panel then make
the Internet Options available in IE?

I probably shouldn't have mentioned that Control Panel repair.
My idea was just to supplement yours by going right back to the
inetcpl.cpl module. If control.exe indicated that it couldn't find
it or that it was having some problem with it then he would have to
fix that symptom. Fixing that would be a necessary condition to
make the other interfaces work but there might be other things
wrong with them too (such as the things you had already checked
and the possibility that the Control Panel's list of icons was somehow
incomplete) which would then (perhaps) require the Control Panel
repair. E.g. Ramesh's regsvr32 command might also repair
the control panel symptom; I don't know. (We could probably
check on that fact using RegMon. <eg>)


HTH

Robert
---

 

[Jan Il]

Hi Robert

Agreed. I suspect that either the inetcpl.cpl module is missing
or it is damaged. You are correct that it could just have been disabled
but you have already done tests to discount that idea and Huey's
description indicates that he is a standalone user though I admit
that I may be assuming too much thinking of him as an owner too.

Ok... I think it is safe to assume that Huey's the Cap'n of his ship and no
one else has had the helm. It does appear that the inetcpl.cpl module is
kaput or AWOL.
...

I didn't get any sense that there was a connectivity problem.
BTW notice that Huey is an Other Poster but not Opening Poster.
(He's a MTBDWP <eg>)

Yes! Try an experiment? Start FileMon filtering on inetcpl
Then do separately (so the timestamps for each test are evident)
1. Run... control inetcpl.cpl
2. Click on Internet Options icon in Control Panel
3. Press Alt-T,O in IE

Aha! I was not aware of 1. and 3. Cool! Each one of them opens the
Internet Options. Thus, either of these could also be used to do so if one
or the other was not working, perhaps offering a means to access the IO and
make necessary changes to correct the problem. Or, as in Huey's case,
perhaps none of them would work if a needed file is missing or corrupted. I
find that working through as many alternative solutions as possible before
throwing in the repair tool, which may, or may not, resolve the problem,
will often uncover unknown factors that could cause worse problems as well.

Hmm... I answered your question I think but created a bunch
more for myself...

It's all clever science, ya know. Something about 'for every question
answered, a new one is born.' Newton.....wasn't it? ;o))

I probably shouldn't have mentioned that Control Panel repair.
My idea was just to supplement yours by going right back to the
inetcpl.cpl module. If control.exe indicated that it couldn't find
it or that it was having some problem with it then he would have to
fix that symptom. Fixing that would be a necessary condition to
make the other interfaces work but there might be other things
wrong with them too (such as the things you had already checked
and the possibility that the Control Panel's list of icons was somehow
incomplete) which would then (perhaps) require the Control Panel
repair. E.g. Ramesh's regsvr32 command might also repair
the control panel symptom; I don't know. (We could probably
check on that fact using RegMon. <eg>)

Yes, Ramesh's suggestion could do the necessary repair. But, for me, it
would also be important to find out how or why the function was disabled or
icons lost in the first place, as it might be a indication of other problems
that may not yet be evident, or, could happen again. Sometimes, just fixing
the obvious does not always mean it is 'fixed'. However, I'm just a

HTH

Indeed! Thank you very much for your very detailed explanations and
experiments. They have been most helpful.

Jan
Smiles are meant to be shared,
that's why they're so contagious.