How do I lock down internet explorer 8 with GPO registry?

4
=
0
+
4
4 Bitcoin bounty has been announced by author.
0 has been already awarded by author.
4 remains available.
1

Windows server 2003 and windows xp

2 answers

2
=
3
=
$1.46
3 tips with total amount of 6.3999996 mBTC($1.46 USD) have been sent by lampego, alex

You may want use the default settings from IE8 group policy objects available (this wasn't sufficient for me) to do that you need to download and save the install file of IE8 from IE installer website, open the file with winrar or 7zip then find and extract the following file: inetres.adm into your desktop or my documents or the default template location (C:\WINDOWS\inf).

The default settings might work fine for removing the options menu, status bar and such but there were two more things I need that were not there. I searched high and low for the following tasks: Hide/remove/disable address bar Hide/remove/disable favourites and the command bar

I finally found them and will show you the registry changes first and then how to put it together into an adm template, which can be added to your group policy editor and modified from there.

To remove/hide the address bar the following registry change must be made:

HKEYCurrentUSER\software\policies\microsoft\internet explorer\toolbars\restrictions Value name: NoNavBar Type: DWORD Value: 1 (on)

To remove/hide the command bar (includes favourites), this registry change must be made:

HKEYCurrentUSER\software\policies\microsoft\internet explorer\toolbars\restrictions Value name: NoCommandBar Type: DWORD Value: 1 (on)

create a new notepad text file/or open notepad and copy+past the following class user

category IESettings

policy "disable/hide IE command bar" keyname "software\policies\microsoft\internet explorer\toolbars\restrictions" explain "here is the explaination" valuename "NoCommandBar" valueon numeric 1 valueoff numeric 0 end policy

policy "disable/hide IE nav bar" keyname "Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions" explain "here is the explaination" valuename "NoNavBar" valueon numeric 1 valueoff numeric 0 end policy

end category

Make sure to add this blank space at the bottom of the file (ask MS why this is, I just know the gpo editor won't accept it otherwise)

Save it as NAME.adm (remove the .txt) where NAME is what you would like to name it i.e removeaddressbar.adm (doesn't make any difference)

Now to add the file to gpo editor

Once that is done you will see it under IESettings, enable the nessary objects for you and replicate the changes (Go to Start>Run>cmd and type "gpupdate /force" to speed things up)

This works for me but as we know with different environments and settings so let me know if you have problems!

Enjoy and good luck!

SEND BITCOIN TIPS
User rating:

Your answer helped me :)

User rating:

and more :)

User rating:

Hey Boris, you've got 3 bitcoin tips for this answer :) How kool is that?

User rating:
Awesome!
3

Awesome

SEND BITCOIN TIPS
0

Too many commands? Learning new syntax?

FavScripts.com is a free tool to save your favorite scripts and commands, then quickly find and copy-paste your commands with just few clicks.

Boost your productivity with FavScripts.com!

Post Answer