Question

  Asked: Jun 10 2005   4:24 AM GMT
  Asked by: cripdan


Restricting Broswe capability in IE


Tech support, Help Desk, Hardware, Servers, Desktops, Intel PC hardware, Windows 2000 desktop, Windows client administration and maintenance, Desktop security, Policies, Power management, Registry, Remote management, Software distribution, Thin clients, Windows XP, DataCenter

A generic User account is used to run an application in an IE Browswer - I would like to remove the address bar so it can't be used. I think its a Registry tweak - can it be done using a policy specific to that account in Active Domain? If so how?

Thanks

Cripdan

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0



A Group Policy can be created to limit the functionality of IE. If you are using a Windows 2000 Active Directory you will need to download an update to get this functionality to control IE. If you are using Windows 2003 the policies will already exist.

Assigning the policy is the next step. You can either create the policy and assign it to the domain and then adjust the permissions on the policy so that it is only applied to a group or the individual user. I find this to get complex when you have multiple policies, making it a little more difficult to determine who get which policy. Seeing as in IT we don't like to make things more difficult...you might consider creating an Organization Unit (OU) for this generic user and others like it (perhaps service accounts). Then apply the policy specifically to that OU.
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Microsoft Windows, DataCenter and Channel.

Looking for relevant Microsoft Windows Whitepapers? Visit the SearchEnterpriseDesktop.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

cptrelentless  |   Jun 10 2005  12:00PM GMT

I think PaulieEddie means get the updated ADM files. These come with the service pack, so assuming you use an XP SP2 workstation to modify your GPOs with the console you wouldn’t need to update anything manually.
There is a ‘menubar = no’ option, check out this link:
<a href="http://msdn.microsoft.com/workshop/author/dhtml/reference/methods/open_0.asp" rel="nofollow">http://msdn.microsoft.com/workshop/author/dhtml/reference/methods/open_0.asp</a>

 

rjournitz574  |   Jun 10 2005  4:04PM GMT

All:

The complete list of all adm files are available for download at the Microsoft web site.

You can get them by opening <a href="http://www.microsoft.com" rel="nofollow">www.microsoft.com</a> and searching all of Microsoft with the search string adm. The second link on the search page is what you are looking for.

Or

If the URL does not get changed you can use,

<a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en." rel="nofollow">http://www.microsoft.com/downloads/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en.</a>

These are the most current files and Microsoft does keep them updated when a new version of an OS or service pack are released.

Randy

 

cripdan  |   Jun 13 2005  4:09AM GMT

All,

Many thanks for your feedback - some v good points.

Regards Cripdan