Discussion:
Internet Explorer
(too old to reply)
Rob S
2005-06-30 16:19:32 UTC
Permalink
Is there a Group Policy setting to completely disable IE in W2003?

Even with everything locked down some apps have buttons which open an IE window
- I can stop Explorer opening but can't seem to find an option that disables IE.

thanks


-Rob
robatwork at mail dot com
storrc
2005-06-30 16:20:34 UTC
Permalink
As a work around you could put NTFS permission on iexplore.exe so only
administrators have permissions to it
Rob S
2005-07-01 10:05:09 UTC
Permalink
On 30 Jun 2005 09:20:34 -0700, "storrc" <***@palmcottage.fsnet.co.uk>
wrote:

-As a work around you could put NTFS permission on iexplore.exe so only
-administrators have permissions to it

Yep I'll give this a go - it seems odd that given the myriad settings in policy
permissions for IE, that "disable IE" isn't one of them!

rgds


-Rob
robatwork at mail dot com
Vera Noest [MVP]
2005-07-01 10:07:53 UTC
Permalink
Post by Rob S
On 30 Jun 2005 09:20:34 -0700, "storrc"
-As a work around you could put NTFS permission on iexplore.exe
so only -administrators have permissions to it
Yep I'll give this a go - it seems odd that given the myriad
settings in policy permissions for IE, that "disable IE" isn't
one of them!
rgds
-Rob
I think that's because IE is so intermixed with the core OS, and many
other applications depend on IE. I expect that you will find that
disabling IE alltogether is not a practical solution.

_________________________________________________________
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*
Rob S
2005-07-05 12:06:19 UTC
Permalink
On Fri, 01 Jul 2005 03:07:53 -0700, "Vera Noest [MVP]"
<***@remove-this.hem.utfors.se> wrote:

-I think that's because IE is so intermixed with the core OS, and many
-other applications depend on IE. I expect that you will find that
-disabling IE alltogether is not a practical solution.

Cynically speaking, I expect MS don't *want* it to be a practical solution. I've
read articles from 98 onwards about how to remove IE from Windows. I wouldn't
dream of attempting it on 2003 though!

rgds

-Rob
robatwork at mail dot com
Jason Woodbury
2005-09-07 16:30:09 UTC
Permalink
Rob,
I'd recommend using the group policy to only allow certain applications to
run, for example, add msaccess.exe, winword.exe and excel.exe or any other
.exe programs you want them to use. Go through Vera's notes on how to create
the group policy/loopback for the terminal services server, then under user
config -> Admin templates -> System-> "run only allowed Windows applications"
and add which programs you want to run, but don't add in iexplore.exe.
Post by Rob S
On Fri, 01 Jul 2005 03:07:53 -0700, "Vera Noest [MVP]"
-I think that's because IE is so intermixed with the core OS, and many
-other applications depend on IE. I expect that you will find that
-disabling IE alltogether is not a practical solution.
Cynically speaking, I expect MS don't *want* it to be a practical solution. I've
read articles from 98 onwards about how to remove IE from Windows. I wouldn't
dream of attempting it on 2003 though!
rgds
-Rob
robatwork at mail dot com
Rob S
2005-09-09 14:28:34 UTC
Permalink
Thanks for the suggestions. We are running a bespoke system on the server, not a
standard database/spreadsheet app. This calls on many different apps - some of
which I would probably miss out if I tried to put them all in that list.

However it's one I'll bear in mind - the system is so locked down now that even
if they get into IE they can't go anywhere, and can't get out again!


-Rob

On Wed, 7 Sep 2005 09:30:09 -0700, "Jason Woodbury"
<***@discussions.microsoft.com> wrote:

-Rob,
-I'd recommend using the group policy to only allow certain applications to
-run, for example, add msaccess.exe, winword.exe and excel.exe or any other
-.exe programs you want them to use. Go through Vera's notes on how to create
-the group policy/loopback for the terminal services server, then under user
-config -> Admin templates -> System-> "run only allowed Windows applications"
-and add which programs you want to run, but don't add in iexplore.exe.
-
-"Rob S" wrote:
-
-> On Fri, 01 Jul 2005 03:07:53 -0700, "Vera Noest [MVP]"
-> <***@remove-this.hem.utfors.se> wrote:
->
-> -I think that's because IE is so intermixed with the core OS, and many
-> -other applications depend on IE. I expect that you will find that
-> -disabling IE alltogether is not a practical solution.
->
-> Cynically speaking, I expect MS don't *want* it to be a practical solution.
I've
-> read articles from 98 onwards about how to remove IE from Windows. I wouldn't
-> dream of attempting it on 2003 though!
->
-> rgds
->
-> -Rob
-> robatwork at mail dot com
->

Loading...