IE restrictions

  • Thread starter Thread starter news.microsoft.com
  • Start date Start date
N

news.microsoft.com

We would like to limit Internet Explorer for users on our Terminal Server to
only be able to access a few specific websites, and nothing else. We have a
fairly restrictive GPO that locks down their Windows environment quite a
bit, and now we'd like to restrict their Internet access. Is there a good
way to do this through a GPO?

One way I thought this might be accomplished is by forcing IE into full
screen mode, and populating their Favorites with the websites that they can
access. I can find a setting in the GPO to prevent users from accessing full
screen mode, but is there a way to force it?

Please let me know of any ideas. I'd rather do it for users and not the
machines, and we do not have a proxy server, so I'd prefer not to do it from
the firewall. We'd prefer to use a GPO or IEAK, but if we really need a
third-party product for this, please let me know that too.
 
Howdy!

news.microsoft.com said:
One way I thought this might be accomplished is by forcing IE into full
screen mode, and populating their Favorites with the websites that they can
access. I can find a setting in the GPO to prevent users from accessing full
screen mode, but is there a way to force it?
Click to expand...

Although you really don't wanna hear it: using a proxy server would be
the easiest solution - at least as far I know.

However: Microsoft has released a package with "Common Group Policy
Scenarios" - if I remember this right, there are scenarios called
"kiosk.." that are a bit of what you want to achieve. This may be worth
a look:
http://www.microsoft.com/downloads/...45-8aa6-4775-9208-c681a7043292&displaylang=en

Maybe you could - if there shall be no other way to access any other
resource on the computer - specify the Internet Explorer (iexplore.exe -
k "http://whatever.com) as the default shell. This will prevent people
from just closing it.

cheers,

Florian
 
I realize that a proxy server would probably be best. I downloaded what you
suggested, and I don't think that's quite what we're looking for. Are there
any other ideas?
 
I'm not sure if this would work for Terminal Server but I guess it's
worth a try. Create a shortcut to Internet Explorer and in the Path box
add a -k to it. this will open IE in Kiosk mode.

"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -k

Mr C.

news.microsoft.com explained on 08/05/2006 :
 
That's kind of interesting - how can we let the users close IE when it's in
this mode?
 
Back
Top