Stop user from changing Content Advisor in registry

[OscarVogel]

On a Win2kPro PC I have configured Content Advisor to block access to all
but approved Internet sites (Artical ID: 267930). But after a few days I've
noticed that "Users can see sites that have no rating" has been checked! At
first I thought I was forgetting to uncheck it. But that's not it. Then I
thought that the user might have gotten the password by watching over my
shoulder. But that's not it either because I've changed the password, but
the setting STILL gets changed.

Now I'm thinking that the user is doing it by editing the registry. The
user's account is a member of the local Administrators group. When I remove
him from the Admin group I've get errors at start up. (such as "An error
occurred calling "DllRegisterServer" in C:\Windows\system32\vbscript.dll".)
So:

- How can I stop that one user from editing the registry, w/out removing his
acct from the Administrators group?

- Where is that registry setting for "Users can see sites that have no
rating"?

- Could he be changing it by using Local Policies?

- If I MUST remove him from the Admin group, how do I deal with those error
messages? (Does "regsvr32" fix that?)

Thanks.

 

[OscarVogel]

Now I DON'T think that the user is the one that's actually somehow checking
"Users can see sites that have no rating". I'm thinking that one of the
programs that we have running on it is somehow doing it. I don't know if
that matters. The main thing is that I need to stop it from happening
because whenever he CAN surf the web he DOES surf the web. Then the boss
eventually sees him doing it & comes to me and asks why I can't lock down
this guys PC.

Anyway, I went ahead and used regsvr32 to register the dll's & ocx's that
were causing the "DllRegisterServer" error messages when an non-Admin logged
on. And now I've removed the user's acct from the Administrators group.
Now he can log on as an ordinary User w/out getting those errors. I'm
hoping that it will put an end to the check mark mysteriously appearing
beside "Users can see sites that have no rating."

 

[Frank Saunders, MS-MVP OE/WM]

On a Win2kPro PC I have configured Content Advisor to block access to all
but approved Internet sites (Artical ID: 267930). But after a few days
I've noticed that "Users can see sites that have no rating" has been
checked! At first I thought I was forgetting to uncheck it. But that's
not it. Then I thought that the user might have gotten the password by
watching over my shoulder. But that's not it either because I've changed
the password, but the setting STILL gets changed.

Now I'm thinking that the user is doing it by editing the registry. The
user's account is a member of the local Administrators group. When I
remove him from the Admin group I've get errors at start up. (such as "An
error occurred calling "DllRegisterServer" in
C:\Windows\system32\vbscript.dll".) So:

- How can I stop that one user from editing the registry, w/out removing
his acct from the Administrators group?

- Where is that registry setting for "Users can see sites that have no
rating"?

- Could he be changing it by using Local Policies?

- If I MUST remove him from the Admin group, how do I deal with those
error messages? (Does "regsvr32" fix that?)

Thanks.

It might be a security program blocking the Registry change it needs to
make. A few, but not all, of the programs now doing this are:
Ad-aware's Ad-Watch
IBM Access Connections
McAfee VirusScan and/or Antispyware
Norton AV
Spyware Blaster
Spybot> Tools> IE Tweaks
Spybot- Teatimer
Spysweeper
Windows Defender
Zone Alarm (free) 6.5 Reported to be fixed in later versions.

In the case of Zone Alarm 6.5 or Norton 2007 it actually has to be
uninstalled. Make sure the Windows Firewall is turned on until you
reinstall Zone Alarm.

Boot into Safe Mode with Networking and try the change.

 

[OscarVogel]

Frank,

I might not have been perfectly clear. What been happening is;

- When I see that there is a check mark next to "Users can see sites that
have no rating." I am able to remove the check mark.

- And even after rebooting the computer it will remain unchecked.

- But when I check hours or days later I find that the check mark will
somehow have reappeared.

How could that happen?

 

[Jaime Rodríguez]

Hello,

You might want to check in GPEDIT.MSC in user config-administrative
tools-windows components-Internet Explorer. There are a lot of config there
you might want to check if one or two of them fits your needs.

Greetings,
JR.