User Group Policy - Internet Explorer (2.)

Group Policy - Internet Explorer for Users (2)

This section is mainly about Group Policies for tying down the user rather than being 'Mr Nice'.  If you like wearing the 'Mr Nasty' hat, then there are lots of Group Policies here for you to screw down the user settings.

There are three places where you can configure Internet Explorer policies.

1. User Configuration, Windows Settings, Internet Explorer Maintenance (Best)
2. User Configuration, Administrative Templates, Windows Components, Internet Explorer (Here)
3. Computer Configuration, Administrative Templates, Windows Components, Internet Explorer

  ‡

Group Policy Topics

Administrative Templates

     Windows Components

      Internet Explorer Root

• Internet Control Panel

• Offline Pages

• Browser menus

• Toolbars

• Persistent behaviour

• Administrator Approved Controls

3. Computer Configuration for Internet Explorer

* Guy's Top Three Internet Explorer Group Policies

1. Disable Attachment Download from Outlook Express
2. Disable Save Program To Disk
3. Administrator Approved Controls

Troubleshooting Group Policies is tricky

As an MCT trainer, I can thoroughly recommend TrainSignal because they provide practical hands on training.  In particular, I like the way TrainSignal cover all learning methods, instructor lead, video and of course text material.  You can either take one module, for example Group Policy or go for a combination of modules.  See more about Group Policy training here

Root - User Settings

Put blinkers on the users, is the theme of this section.  For example, force users to concentrate on their jobs by stopping them from changing the Proxy addresses, Ratings, Connections and many similar areas.

Companies with Internet Browsing policies will love this section.  Alternatively, you could turn the situation on its head and design your office paper based policy using ideas copied from these Group Policy settings.

* Disable Attachment Download from Outlook Express could be worth considering.

Be careful with 'Disable AutoComplete forms', I think it mean to stop forms saving passwords and usernames that people use regularly.  I say be careful, because I really like being able to save my username and password, that way, I do not having to keep typing it in every time I visit a site.

Internet Control Panel

Once again 'Disable' is the theme.  You can prevent the users from even seeing tabs like security and content in Internet Explorer.  In addition, you can even control what the users can do thought the Computer Configuration settings.

Offline Pages

Do you really want to disable users from saving pages?  Probably, if the machine is a kiosk or in a public area.

Browser Menus

If you are serious about security, then you will need to disable the ability to *Save Program To Disk.  As for the rest of the Group Policies, they seem pretty harmless to me and, I cannot make a good case for disabling many of these settings.

Toolbars

I like the Alexa and Google toolbars so I would be dismayed if a policy denied me these useful aids.

Persistent behaviour

Here is where you can set limits on files saved from various zones.  Useful when short of disk space.  Worth setting if you are going to restrict the internet temporary files in general.

* Administrator Approved Controls

Here we are talking ActiveX.  The danger is that rogue ActiveX code could cripple a machine.  What these policies will do is help you Approve Zones where users can run Chat, Shockwave, Media Player and similar 'Real Time' programs.

3. Computer Configuration, Administrative Templates, Windows Components, Internet Explorer

Only employ these user settings if you wish to 'fine tune' the Internet Control Panel in the above User Configuration, Administrative Templates.  90% of the IE policies are taken care of in the User Settings.

'Make Proxy Server per machine' - may be worth considering.

Next: Start Menu