Cannot close the door to ibm.com

[Guest]

Internet Explorer 6 has a setting in Internet-Options, Content,
Internet-Restrictions. In this tab I can setup IE in such a way, that I can
browse to ONLY the domains that I have entered in this list. (kiosk-mode)

This works fine, I enter eg. www.microsoft.com and I can ONLY browse to
microsoft.

BUT; When I setup IE 6 to ONLY be able to browse to www.microsoft.com and I
enter the URL www.ibm.com in the address-bar, I can ALWAYS go to ibm.com! No
matter what I enter in the approved-sites-list.

Is this basically a backdoor through which IBM.com stays open, although I
don't want it to be? This means a security issue, because I do not know which
other domains (if any) remain open.

Info: OS is MS Windows XP SP2, with all updates. (except IE 7)
Internet Explorer 6 SP2

 

[PA Bear]

cf.
http://groups.google.com/group/micr..._frm/thread/a6bee0bfc83e06fd/389a74420a3ea783

Is it an IBM or Lenovo machine?

 

[Guest]

No, it's not an IBM machine, even better, I can replicate this issue on
different machines and in different environments. (Tested on four different
individual machines)
I think that also you can replicate this issue.

Regards,
Roland

 

[PA Bear]

Internet Explorer 6 has a setting in Internet-Options, Content,
These Restrictions are not there by default. Are you using GPO or Content
Advisor to accomplish this, Roland?

See any clues in the other threads I cited (see link) in my previous reply?

 

[Swifty]

Internet Explorer 6 has a setting in Internet-Options, Content,
Internet-Restrictions. In this tab I can setup IE in such a way, that I can
browse to ONLY the domains that I have entered in this list. (kiosk-mode)

I don't see a mechanism for saying "and nothing else" unless you enter
some sort of wildcard entry using the "Never allow" mechanism.
Saying that you approve of microsoft.com doesnt seem to imply that you
dissaprove of everything else.

I don't see an obvious way to achieve a kiosk mode.

 

[Robert Aldwinckle]

I don't see a mechanism for saying "and nothing else" unless you enter
some sort of wildcard entry using the "Never allow" mechanism.
Saying that you approve of microsoft.com doesnt seem to imply that you
dissaprove of everything else.

I don't see an obvious way to achieve a kiosk mode.

Get out your thesaurus... Another synonym for limit or restrict or control
(apparently) is block... ; )

<title>How to configure Internet Explorer 5.x to block access to all but approved Internet sites</title>
http://support.microsoft.com/kb/267930

Hard to find and I knew it was there!

This article is so old that you might also find some discussion
on Google Groups using keyword Q267930... ; )


Good luck

Robert Aldwinckle
---

 

[Guest]

Hi PA Bear,

No, the only thing I use goes like:
Menu Extra -> Internet Options -> Content -> Internet- Restrictions ->
Settings
There you will find a buttun with which you can setup a number of websites
you will allow the browser to connect to.

Pardon me if the English version of IE 6 is a little different from mine,
but this dialog-screen is standard available on all IE 6's that I have seen.

This one is in my Dutch version of Internet Explorer Versions:
6.0.2900.xpsp_sp2_gdr.050301-1519

This has been tested on different machines, also machines with no gpo (stand
alone).

Thanks for your appreciated reply.
Roland