IE restrictions

[news.microsoft.com]

We would like to limit Internet Explorer for users on our Terminal Server to
only be able to access a few specific websites, and nothing else. We have a
fairly restrictive GPO that locks down their Windows environment quite a
bit, and now we'd like to restrict their Internet access. Is there a good
way to do this through a GPO?

One way I thought this might be accomplished is by forcing IE into full
screen mode, and populating their Favorites with the websites that they can
access. I can find a setting in the GPO to prevent users from accessing full
screen mode, but is there a way to force it?

Please let me know of any ideas. I'd rather do it for users and not the
machines, and we do not have a proxy server, so I'd prefer not to do it from
the firewall. We'd prefer to use a GPO or IEAK, but if we really need a
third-party product for this, please let me know that too.

 

[Florian Frommherz]

Howdy!

One way I thought this might be accomplished is by forcing IE into full
screen mode, and populating their Favorites with the websites that they can
access. I can find a setting in the GPO to prevent users from accessing full
screen mode, but is there a way to force it?

Although you really don't wanna hear it: using a proxy server would be
the easiest solution - at least as far I know.

However: Microsoft has released a package with "Common Group Policy
Scenarios" - if I remember this right, there are scenarios called
"kiosk.." that are a bit of what you want to achieve. This may be worth
a look:
http://www.microsoft.com/downloads/...45-8aa6-4775-9208-c681a7043292&displaylang=en

Maybe you could - if there shall be no other way to access any other
resource on the computer - specify the Internet Explorer (iexplore.exe -
k "http://whatever.com) as the default shell. This will prevent people
from just closing it.

cheers,

Florian

 

[news.microsoft.com]

I realize that a proxy server would probably be best. I downloaded what you
suggested, and I don't think that's quite what we're looking for. Are there
any other ideas?

 

[Mr C]

I'm not sure if this would work for Terminal Server but I guess it's
worth a try. Create a shortcut to Internet Explorer and in the Path box
add a -k to it. this will open IE in Kiosk mode.

"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -k

Mr C.

news.microsoft.com explained on 08/05/2006 :

 

[news.microsoft.com]

That's kind of interesting - how can we let the users close IE when it's in
this mode?

 

[Mr C]

That's kind of interesting - how can we let the users close IE when it's in
this mode?

news:[email protected]...

With good ole ALT + F4

Mr C.