hide/lock security tab in options

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

is it possible to to hide , control or lock the security options in OE 6, so users can't change security settings (like changing virus protection)

something like group policy or registry option

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

In article <2F4F44D9-4C15-4201-8B77-528D14C78330@microsoft.com>,
anonymous@discussions.microsoft.com says...
> is it possible to to hide , control or lock the security options in OE 6, so users can't change security settings (like changing virus protection)
>
> something like group policy or registry option
>
Yup, User configuration\Administrative Templates\Windows Components
\Internet Explorer\Internet Control Panel\"Disable the Security page"

You also have several other settings under Computer Configuration
\Administrative Templates\Windows Components\Internet Explorer:

Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites

In addition, you can customize the zones from:
User Configuration\Windows Settings\Internet Explorer Maintenance
\Security

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

Marin Marinov said in
news:MPG.1b254fb5db144760989847@msnews.microsoft.com:
> In article <2F4F44D9-4C15-4201-8B77-528D14C78330@microsoft.com>,
> anonymous@discussions.microsoft.com says...
>> is it possible to to hide , control or lock the security options in
>> OE 6, so users can't change security settings (like changing virus
>> protection)
>>
>> something like group policy or registry option
>>
> Yup, User configuration\Administrative Templates\Windows Components
> \Internet Explorer\Internet Control Panel\"Disable the Security page"
>
> You also have several other settings under Computer Configuration
> \Administrative Templates\Windows Components\Internet Explorer:
>
> Security Zones: Use only machine settings
> Security Zones: Do not allow users to change policies
> Security Zones: Do not allow users to add/delete sites
>
> In addition, you can customize the zones from:
> User Configuration\Windows Settings\Internet Explorer Maintenance
> \Security
>
> HTH

Note that blocking access to Internet Options using these policy
settings only keeps users from that applet from within IE. They can
still use the Internet Options applet in Control Panel.

--
____________________________________________________________
*** Post replies to newsgroup. Share with others.
*** Email domain = ".com" *AND* append "=NEWS=" to Subject.
____________________________________________________________

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

<snip>
> Note that blocking access to Internet Options using these policy
> settings only keeps users from that applet from within IE. They can
> still use the Internet Options applet in Control Panel.
>
No, they can't. Physically it's absolutely the same dialog fired up from
two different places. Once you enable "Disable the Security page"
setting the tab is gone. Where have you observed this?
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

thanks Marin for your help,

that doesn't work for Outlook express (OE),
it does work only for IE..??
i can still change OE security settings after applying those GPO settings

thanks

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

Marin Marinov said in
news:MPG.1b2651bf602335f698984c@msnews.microsoft.com:
> <snip>
>> Note that blocking access to Internet Options using these policy
>> settings only keeps users from that applet from within IE. They can
>> still use the Internet Options applet in Control Panel.
>>
> No, they can't. Physically it's absolutely the same dialog fired up
> from two different places. Once you enable "Disable the Security page"
> setting the tab is gone. Where have you observed this?

The following registry key blocks access to the Internet Options applet
but *only* when called from within IE:

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions

NoBrowserOptions = 0 or omitted (enabled)
= 1 (disabled)

This tweak can be set/cleared in several utilities, like Spybot. The
applet itself is not restricted, only calling it from within IE is
disabled.

I didn't know what registry keys or value names get created or modified
for the group policy settings you mentioned. So I ran Installwatch to
take a snapshot, changed the policy (to enable the disable of the
Security tab, and the same for the other tabs), analyzed the changes
made to the registry, and found it alters:

HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy
Objects\LocalUser\Software\Policies\Microsoft\Internet Explorer\Control
Panel
AdvancedTab = 1
ConnectionsTab = 1
ContentTab = 1
GeneralTab = 1
PrivacyTab = 1
ProgramsTab = 1
SecurityTab = 1

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
AdvancedTab = 1
ConnectionsTab = 1
ContentTab = 1
GeneralTab = 1
PrivacyTab = 1
ProgramsTab = 1
SecurityTab = 1

When I opened the Internet Options applet (either through IE, Control
Panel, or inetcpl.cpl), the Security tab was indeed missing. When I
disabled all tabs then I would get the prompt that access was denied.
Thanks for the heads up. I had been disappointed with other utilities
that supposedly locked out the Internet Options applet but only did so
when called from within IE.

--
____________________________________________________________
*** Post replies to newsgroup. Share with others.
*** Email domain = ".com" *AND* append "=NEWS=" to Subject.
____________________________________________________________

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

<snip>
I'm glad I provoked your interest and "hunger for knowledge"

--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.inetexplorer.ie6_outlookexpress (More info?)

In article <007F7827-EE73-4BE6-93E7-785EF9F450BD@microsoft.com>,
anonymous@discussions.microsoft.com says...
> thanks Marin for your help,
>
> that doesn't work for Outlook express (OE),
> it does work only for IE..??
> i can still change OE security settings after applying those GPO settings
>
> thanks
>
Nope, it doesn't, these are two different dialogs. There doesn't seem to
be any other setting than "Block attachments" for OE and I haven't been
able to dig up the registry keys that get set. You can try monitoring
where OE saves its settings using a registry monitor like RegMon from
www.sysinternals.com and then extend the GPO settings with a custom
administrative template file. Sorry I can't give you a better solution

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.