Restricting a limited user from changing the registry

  • Thread starter Thread starter Gordon
  • Start date Start date
G

Gordon

I have a limited user that has been onto a website with "drive-by"
malware installations. Is there a way through Local Security Policy to
disable this user from changing the registry in this way?

Thanks
 
Local Computer Policy\Computer Configuration\Administrative
Templates\Windows Components\Internet Explorer\
Disable Automatic Install of Internet Explorer components

[[Prevents Internet Explorer from automatically installing components.

If you enable this policy, it prevents Internet Explorer from downloading a
component when users browse to a Web site that needs that component.

If you disable this policy or do not configure it, users will be prompted to
download and install a component when visiting a Web site that uses that
component.

This policy is intended to help the administrator control which components
the user installs.]]

Local Computer Policy\User Configuration\Administrative Templates\Windows
Components\Internet Explorer\
Disable the Advanced page

[[Removes the Advanced tab from the interface in the Internet Options dialog
box.

If you enable this policy, users are prevented from seeing and changing
advanced Internet settings, such as security, multimedia, and printing.

If you disable this policy or do not configure it, users can see and change
these settings.

When you set this policy, you do not need to set the "Disable changing
Advanced page settings" policy (located in \User
Configuration\Administrative Templates\Windows Components\Internet
Explorer\), because this policy removes the Advanced tab from the
interface.]]
 
Wesley Vogel cogitated deeply and scribbled thusly:
Local Computer Policy\Computer Configuration\Administrative
Templates\Windows Components\Internet Explorer\
Disable Automatic Install of Internet Explorer components

[[Prevents Internet Explorer from automatically installing components.

If you enable this policy, it prevents Internet Explorer from downloading a
component when users browse to a Web site that needs that component.

If you disable this policy or do not configure it, users will be prompted to
download and install a component when visiting a Web site that uses that
component.

This policy is intended to help the administrator control which components
the user installs.]]

Local Computer Policy\User Configuration\Administrative Templates\Windows
Components\Internet Explorer\
Disable the Advanced page

[[Removes the Advanced tab from the interface in the Internet Options dialog
box.

If you enable this policy, users are prevented from seeing and changing
advanced Internet settings, such as security, multimedia, and printing.

If you disable this policy or do not configure it, users can see and change
these settings.

When you set this policy, you do not need to set the "Disable changing
Advanced page settings" policy (located in \User
Configuration\Administrative Templates\Windows Components\Internet
Explorer\), because this policy removes the Advanced tab from the
interface.]]
Click to expand...
Thanks for the info - I'd looked there but didn't see these!
 
I suffer from that often myself. ;-)

--
Hope this helps. Let us know.
Wes

In
Gordon said:
Wesley Vogel cogitated deeply and scribbled thusly:
Local Computer Policy\Computer Configuration\Administrative
Templates\Windows Components\Internet Explorer\
Disable Automatic Install of Internet Explorer components

[[Prevents Internet Explorer from automatically installing
components.

If you enable this policy, it prevents Internet Explorer from
downloading a component when users browse to a Web site that needs
that component.

If you disable this policy or do not configure it, users will be
prompted to download and install a component when visiting a Web
site that uses that component.

This policy is intended to help the administrator control which
components the user installs.]]

Local Computer Policy\User Configuration\Administrative
Templates\Windows Components\Internet Explorer\
Disable the Advanced page

[[Removes the Advanced tab from the interface in the Internet
Options dialog box.

If you enable this policy, users are prevented from seeing and
changing advanced Internet settings, such as security, multimedia,
and printing.

If you disable this policy or do not configure it, users can see and
change these settings.

When you set this policy, you do not need to set the "Disable
changing Advanced page settings" policy (located in \User
Configuration\Administrative Templates\Windows Components\Internet
Explorer\), because this policy removes the Advanced tab from the
interface.]]
Click to expand...
Thanks for the info - I'd looked there but didn't see these!
Click to expand...
 
Back
Top