Internet Explorer

[Rob S]

Is there a Group Policy setting to completely disable IE in W2003?

Even with everything locked down some apps have buttons which open an IE window
- I can stop Explorer opening but can't seem to find an option that disables IE.

thanks


-Rob
robatwork at mail dot com

 

[storrc]

As a work around you could put NTFS permission on iexplore.exe so only
administrators have permissions to it

 

[Rob S]

On 30 Jun 2005 09:20:34 -0700, "storrc" <[email protected]>
wrote:

-As a work around you could put NTFS permission on iexplore.exe so only
-administrators have permissions to it

Yep I'll give this a go - it seems odd that given the myriad settings in policy
permissions for IE, that "disable IE" isn't one of them!

rgds


-Rob
robatwork at mail dot com

 

[Vera Noest [MVP]]

On 30 Jun 2005 09:20:34 -0700, "storrc"

-As a work around you could put NTFS permission on iexplore.exe
so only -administrators have permissions to it

Yep I'll give this a go - it seems odd that given the myriad
settings in policy permissions for IE, that "disable IE" isn't
one of them!

rgds


-Rob

I think that's because IE is so intermixed with the core OS, and many
other applications depend on IE. I expect that you will find that
disabling IE alltogether is not a practical solution.

_________________________________________________________
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*

 

[Rob S]

On Fri, 01 Jul 2005 03:07:53 -0700, "Vera Noest [MVP]"

-I think that's because IE is so intermixed with the core OS, and many
-other applications depend on IE. I expect that you will find that
-disabling IE alltogether is not a practical solution.

Cynically speaking, I expect MS don't *want* it to be a practical solution. I've
read articles from 98 onwards about how to remove IE from Windows. I wouldn't
dream of attempting it on 2003 though!

rgds

-Rob
robatwork at mail dot com

 

[Guest]

Rob,
I'd recommend using the group policy to only allow certain applications to
run, for example, add msaccess.exe, winword.exe and excel.exe or any other
..exe programs you want them to use. Go through Vera's notes on how to create
the group policy/loopback for the terminal services server, then under user
config -> Admin templates -> System-> "run only allowed Windows applications"
and add which programs you want to run, but don't add in iexplore.exe.

 

[Rob S]

Thanks for the suggestions. We are running a bespoke system on the server, not a
standard database/spreadsheet app. This calls on many different apps - some of
which I would probably miss out if I tried to put them all in that list.

However it's one I'll bear in mind - the system is so locked down now that even
if they get into IE they can't go anywhere, and can't get out again!


-Rob

On Wed, 7 Sep 2005 09:30:09 -0700, "Jason Woodbury"

-Rob,
-I'd recommend using the group policy to only allow certain applications to
-run, for example, add msaccess.exe, winword.exe and excel.exe or any other
-.exe programs you want them to use. Go through Vera's notes on how to create
-the group policy/loopback for the terminal services server, then under user
-config -> Admin templates -> System-> "run only allowed Windows applications"
-and add which programs you want to run, but don't add in iexplore.exe.
-
-"Rob S" wrote:
-
-> On Fri, 01 Jul 2005 03:07:53 -0700, "Vera Noest [MVP]"
->
-> -I think that's because IE is so intermixed with the core OS, and many
-> -other applications depend on IE. I expect that you will find that
-> -disabling IE alltogether is not a practical solution.
->
-> Cynically speaking, I expect MS don't *want* it to be a practical solution.
I've
-> read articles from 98 onwards about how to remove IE from Windows. I wouldn't
-> dream of attempting it on 2003 though!
->
-> rgds
->
-> -Rob
-> robatwork at mail dot com
->