This section is mainly about Group Policies for tying down the user rather than being 'Mr
Nice'. If you like wearing the 'Mr Nasty' hat, then there
are lots of Group Policies here for you to screw down the user settings.
There are three places where you can configure Internet Explorer
policies.
Put blinkers on the users, is the theme of this section. For example,
force users to concentrate on their jobs by stopping them
from changing the Proxy addresses, Ratings, Connections and many similar
areas.
Companies with Internet Browsing policies will love this section.
Alternatively, you could turn the situation on its head and design your
office paper based policy using ideas copied from these Group Policy settings.
Be careful with 'Disable AutoComplete forms', this is designed to stop forms
saving passwords and usernames that people use regularly. I say be
careful, because I really like being able to save my username and password,
that way, I do not having to keep typing it in every time I visit a site.
Manual steps to 'walk through' IE AutoComplete
Launch Internet Explorer.
Seek the Tools menu / button and click on Internet Options.
In the Internet Options window click the Content tab.
Click the AutoComplete button.
Check or uncheck the options you wish have or not have
AutoComplete.
Web page addresses - AutoComplete refers to the address you type in the
address bar.
Forms - Fill out fields that are commonly completed such as email,
phone number and address
User names and passwords on forms - The main
Internet Explorer AutoComplete setting: Any forms that
require usernames.
Guy
Recommends: Permissions Analyzer - Free Active Directory Tool
I like the
Permissions Monitor because it enables me to see quickly WHO has permissions
to do WHAT. When you launch this tool it analyzes a users effective NTFS
permissions for a specific file or folder, takes into account network share
access, then displays the results in a nifty desktop dashboard!
Think of all the frustration that this free utility saves when you are
troubleshooting authorization problems for users access to a resource.
Once again 'Disable' is the theme. You can prevent the users from even seeing
tabs like security and content in Internet Explorer. In addition, you can
even
control what the users can do thought the Computer Configuration settings.
If you are serious about security, then you will need to disable the
ability to *Save Program To Disk.
As for the rest of the Group Policies, they seem pretty harmless to me and, I
cannot make a good case for disabling many of these settings.
Here is where you can set limits on files saved from various zones.
Useful when short of disk space. Worth setting if you are going to
restrict the internet temporary files in general.
Here we are talking ActiveX. The danger is that rogue ActiveX code
could cripple a machine. What these policies will do is help you
Approve Zones where users can run Chat, Shockwave, Media Player and similar
'Real Time' programs.
Summary of GPO Internet Settings
There are about a dozen places to check the IE Group Policy settings,
the main settings located in these three areas:
Only employ these user settings if you wish to 'fine tune' the Internet Control
Panel in the above User Configuration, Administrative Templates. 90% of the
IE policies are taken care of in the User Settings.
'Make Proxy Server per machine' - may be worth considering.
If you like this page then please share it with your friends
*
Custom Search
Guy Recommends: Orion's NPM - Network Performance Monitor
Orion's performance monitor is designed for detecting network outages. NPM makes it easy to see what's working, and what needs your attention.
This utility guides you through creating network maps. It also helps troubleshooting by indicating whether the root cause is faulty equipment, or resource overload.
