Allowing only IE and nothing else - possible?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

What's the best way to lock down a user account so that only IE can be used
and nothing else - and no files or folders, drives or context menus can be
accessed or file dialogs or active x, etc components can gain access to any
parts of my win2k system except through threat of torture whilst sitting
behind the user? Anyone? And yes I'm serious. No jokes please...

TIA
 
I haven't tried it in a long time but you used to be able to set
iexplore.exe as the shell rather than explorer.exe which caused only IE to
be run at logon, but you still had to use poledit or group policy (or local
policy) to lock down all the drives and programs you didn't want to be run,
the run command, etc...

If you search the web for more info, use the word "kiosk" as that's
typically the purpose for a machine that is locked down that tightly.
 
try this link
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/csws2003.mspx
Click to expand...

Thanks for the info - as its a Windows 2000 Pro machine with no domains,
etc, the link above really isn't suitable for a single two user account pc -
its all aimed at enterprise wide scenarios. Plus when I installed the gpmc
it told me to log in using a domain admin account, which obviously I don't
have...

But thanks for the suggestions - a kiosk user with the ability to log off
and connect to internet to run ie is all I need, so I'll keep fishing about.
 
Many of the Group Policy settings are available for the local policy on
Windows 2000 Professional. The information is geared towards the
enterprise, but can be very helpful in showing the changes that need to be
made on a standalone machine.

The suggestion I had given previously was incomplete regarding the alternate
shell but the Microsoft docs showed the proper syntax of "iexplore.exe -k"
which you should be able to set manually in the registry, or maybe through
local policy.

Unfortunately, I don't have a 2000 machine to play with here, so I can't put
it together for you, but using the info on that page might get you the
results you're looking for.

Good luck,
 
Back
Top