In
tip 1137, we were able to limit access using
Internet Explorer 4.01 SP1.
With Internet Explorer 5.0, we have additional capabilities.
After installing Internet Explorer 5.0 or greater, use Regedt32 to navigate to:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
You may notice two REG_Binary entries (NoFindFiles and NoTheaterMode) already configured. These entries can be deleted and re-added as type REG_DWORD values (if you like consistency).
The new restrictions are enabled by setting the REG_DWORD value to 1. Setting an entry to 0 disables the restriction.
The new restrictions are:
Restriction Description
----------------------------------------------------------------------
NoFileOpen Disables the Open command on the File menu, CTRL+O, and CTRL+L.
NoFileNew Disables CTRL+N
NoBrowserSaveAs Disables Save and Save As on the File menu.
NoBrowserOptions Disables Internet Options on the View menu
(disables changing browser settings).
NoFavorites Removes Favorites menu, adding to favorites, or organizing favorites.
NoSelectDownloadDir Prevents user from being able to select a download folder by
not displaying the Save As dialog box when a file is downloaded.
NoBrowserContextMenu Disables HTML context menu.
NoBrowserClose Disable ALT+F4.
NoFindFiles Disables the F3 key.
NoTheaterMode Disables the F11 key.
An additional restriction can be configured at:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions
Restriction Description --------------------------------------------------------------------- NoToolbarOptions Disables adding, removing, or moving a toolbar.
