Prohibit use of IE

[gbkhor]

hi all

How do i prohibit user from user IE / surfing the internet?

tq

 

[Guest]

I was looking for the same thing and came across this:
On your domain controller, right-click the organizational unit that contains
your domain users, and select Properties.
On the Group Policy tab, click Edit.
Expand User Configuration to set restrictions on a per-user basis.
Expand Windows Settings, and expand Internet Explorer Maintenance.
Select Connection, and double-click Proxy Settings.
Select the Enable Proxy Settings check box, add 0.0.0.0 to the HTTP entry,
and click OK.
Expand Administrative Templates, and expand Windows Components.
Select Internet Explorer, and double-click Disable Changing Proxy Settings.
Select Enabled, and click OK.

It works for me in the case of a Win2K3 domain controller and Win2K clients,
but the proxy setting does not get set on XP clients.
Can anyone answer why?

 

[Mark Heitbrink [MVP]]

I was looking for the same thing and came across this:
[...]
Select the Enable Proxy Settings check box, add 0.0.0.0 to the HTTP entry,
and click OK.

.... and after that they start using Firefox or any other Browser,
that is not using the IE Options.
Be aware: There is no need of installing Firefox, just expand and
run the .exe, every user will find a place to write files.
At least %temp%.
There is no easy (secure) way to handle this with GPO.

The question is:
Why should I configure x.xxx user accounts, if I can handle it
centrally on one single point of administration, that no user
can get around with manipulating his client locally?

The solution is: Proxy with user authentication, e.g Squid

Mark

 

[Gerry Hickman]

Hi Robert,

It works for me in the case of a Win2K3 domain controller and Win2K clients,
but the proxy setting does not get set on XP clients.
Can anyone answer why?

Are you sure you are using the WinXP SP2 ADM files (INETRES.ADM) to set
these policies for the Win2k clients?

Have you tested the policy against a real XP box to see if the proxy
setting is still ignored?

Have you looked at the registry of both operating systems and noted any
differences?

 

[Guest]

I did a test on the XP SP2 clients, where I set the proxy and also denied
users the access the edit the proxy.
The proxy wasn't set, but the user WAS denied access to edit it.
This is confusing my as to why one setting does get applied and the other
doesn't.

 

[Guest]

I have just run some other tests,
If I log into a Domain Controller with this Group Policy, all the settings
are applied.
When I log into the XP SP2 clients, all settings except the one wich should
tick the box "Use a proxy server for LAN".
The proxt settings are in there and ready to be used, but the enabling tick
box does not get checked.

Any ideas on what else to try?