[WEB4LIB] SOLVED Re: Internet Explorer Restrictions

[stephanie spearman]

I do it a little differently. I don't use
"SpecifyButtonsDefault" although I might look into it.
When I first create the user I customize the toolbar
at that point. Then add these Registry restrictions:

HKEY_CURRENT_USER\Software\Microsoft\Policies\Microsoft\Internet
Explorer\Restrictions

values of "NoToolbarCustomize" set to 1 and
"NoToolbarOptions" also set to 1

________________
HKEY_CURRENT_USER\Software\Microsoft\Policies\Microsoft\Internet
Explorer\Toolbars\Restrictions

value under this subkey of "NoToolbarOptions" set to
1.

I've used this with NT4 IE5+ since last summer and
changing the toolbar is one thing no user has been
able to do. As far as how this works with other
options I have enabled--maybe a combination is what
works (such as "NoBrowserOptions") in the end. Wish I
had time to play with it!

Stephanie Spearman
Electronic Services Librarian
NGRL
Dalton, GA




--- "Andrew I. Mutch" <amutch at waterford.lib.mi.us>
wrote:
> I had encountered the same problem that Bob had with
> the toolbar buttons.
> Now that I've figured out the fix in Win2K, I'm
> betting this works in
> other versions of Windows.
> 
> OK, here's the fix that works:
> 
> 1) First, ignore the settings listed in the JSI Tip
> and the MS KB articles
> and use this registry key for the tool bar buttons:
> 
> HKEY_CURRENT_USER[OR
>
LOCAL_MACHINE]\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
> 
> 2) Next, add this REG_DWORD key and set its value to
> 1
> 
> SpecifyButtonsDefault
> 
> If you don't enable this setting, the button
> settings won't work.
> 
> 3) Most important, add your button restrictions as
> REG_DWORD keys such as:
> 
> Btn_Back [for the Back Button]
> 
> and set its value to 2
> 
> 2!  Strange, yes? It is but that's what we
> discovered in Win2K using the
> Group Policies and comparing the restrictions
> against the Registry.  I
> went back and discovered that the same information
> could be found in the
> files that are created by IEAK when you set Browser
> restrictions.  
> 
> I've tested this on a Win2K laptop with IE 5.5 SP1
> by directly editing the
> Registry, not using Group Policies.  But, I'm going
> to bet that this will
> also work on WindowsNT and Windows98.  Still to be
> tested is how other
> registry settings like "NoToolBarCustomize" and
> other settings affect
> these changes.  
> 
> If I get a chance, I'll try to make up a page that
> covers these settings
> and which registry keys and settings you should be
> using.  I hope this is
> helpful.  Happy hacking!
> 
> Andrew Mutch
> Library Systems Technician
> Waterford Township Public Library
> Waterford, MI
> 
> 
> On Wed, 14 Mar 2001, Robert Sullivan wrote:
> 
> > >http://www.jsiinc.com/TIP1900/rh1976.htm
> > 
> > >It outlines a number of registry settings that
> you can set to lock down IE to
> > >prevent patrons from abusing the browser. 
> However, I've found that many of
> > >these settings, like removing specific toolbar
> buttons, do not work in
> > >WindowsNT 4 and Windows9x.
> > 
> > Technically, they work - but you have to use
> policies.  (Now that we have our
> > Gates PCs, I have seen this for myself.)  It
> sounds like Andrew is using Win
> > 2000 policies, so this would be consistent.
> > 
> > I was never successful in making them work just by
> setting them in the
> > registry.  I believe this is because IE configures
> its toolbar at runtime.
> > 
> > For example, you could get the toolbar the way you
> like it and note the
> > registry settings for the two long binary keys
> which control this.  During IE
> > installation you can set these values and IE will
> look the way you want - but
> > you'll see the default toolbar for a second until
> it loads yours.
> > 
> > If you enable NoToolbarCustomize, you'll get the
> default buttons.  This makes a
> > sort of sense if you know IE makes the change at
> runtime, and you're telling it
> > not to allow the account to change the toolbar.
> > 
> > I would speculate that since the policy editor is
> making registry changes that
> > you could make yourself, there's a way to get this
> to work without policies;
> > perhaps there is another setting which conflicts
> with the button-removal
> > settings.  Someone with time on their hands could
> probably enable registry
> > editing in one of the Gates public accounts and
> look at the settings.  I'm
> > trying to get our lab ready for its National
> Library Week opening, so I will
> > leave that as an exercise for someone else. :-)
> > 
> > Bob Sullivan                              
> scp_sulli at sals.edu
> > Schenectady County Public Library (NY)    
> http://www.scpl.org
> > 
> 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - Buy the things you want at great prices.
http://auctions.yahoo.com/