Home > IT Answers > CIO > Restricting Broswe capability in IE
cripdan
0 pts.
 Restricting Broswe capability in IE
Tech support, Help Desk, Hardware, Remote management, Windows XP, Servers, Intel PC hardware, Windows 2000 desktop, Windows client administration and maintenance, Desktop security, Power management, Registry, Software distribution, Thin clients, Policies, Desktops, DataCenter
A generic User account is used to run an application in an IE Browswer - I would like to remove the address bar so it can't be used. I think its a Registry tweak - can it be done using a policy specific to that account in Active Domain? If so how?

Thanks

Cripdan
ASKED: Jun 10, 2005  4:24 AM GMT
UPDATED: June 13, 2005  4:09:57 AM GMT
RELATED QUESTIONS
PaulieEddie
0 pts.
Answer Wiki:
A Group Policy can be created to limit the functionality of IE. If you are using a Windows 2000 Active Directory you will need to download an update to get this functionality to control IE. If you are using Windows 2003 the policies will already exist.

Assigning the policy is the next step. You can either create the policy and assign it to the domain and then adjust the permissions on the policy so that it is only applied to a group or the individual user. I find this to get complex when you have multiple policies, making it a little more difficult to determine who get which policy. Seeing as in IT we don't like to make things more difficult...you might consider creating an Organization Unit (OU) for this generic user and others like it (perhaps service accounts). Then apply the policy specifically to that OU.
Last Wiki Answer Submitted:  Jun 10, 2005  11:32 AM (GMT)  by  PaulieEddie   0 pts.
To see other answers submitted to the Answer Wiki View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



 

I think PaulieEddie means get the updated ADM files. These come with the service pack, so assuming you use an XP SP2 workstation to modify your GPOs with the console you wouldn’t need to update anything manually.
There is a ‘menubar = no’ option, check out this link:
http://msdn.microsoft.com/workshop/author/dhtml/reference/methods/open_0.asp

cptrelentless
 0 pts.
 

All:

The complete list of all adm files are available for download at the Microsoft web site.

You can get them by opening www.microsoft.com and searching all of Microsoft with the search string adm. The second link on the search page is what you are looking for.

Or

If the URL does not get changed you can use,

http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en.

These are the most current files and Microsoft does keep them updated when a new version of an OS or service pack are released.

Randy

rjournitz574
 0 pts.
 

All,

Many thanks for your feedback - some v good points.

Regards Cripdan

cripdan
 0 pts.