SOLVED Re: [WEB4LIB] Re: Internet Explorer Restrictions

[Andrew I. Mutch]

I had encountered the same problem that Bob had with the toolbar buttons.
Now that I've figured out the fix in Win2K, I'm betting this works in
other versions of Windows.

OK, here's the fix that works:

1) First, ignore the settings listed in the JSI Tip and the MS KB articles
and use this registry key for the tool bar buttons:

HKEY_CURRENT_USER[OR
LOCAL_MACHINE]\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

2) Next, add this REG_DWORD key and set its value to 1

SpecifyButtonsDefault

If you don't enable this setting, the button settings won't work.

3) Most important, add your button restrictions as REG_DWORD keys such as:

Btn_Back [for the Back Button]

and set its value to 2

2!  Strange, yes? It is but that's what we discovered in Win2K using the
Group Policies and comparing the restrictions against the Registry.  I
went back and discovered that the same information could be found in the
files that are created by IEAK when you set Browser restrictions.  

I've tested this on a Win2K laptop with IE 5.5 SP1 by directly editing the
Registry, not using Group Policies.  But, I'm going to bet that this will
also work on WindowsNT and Windows98.  Still to be tested is how other
registry settings like "NoToolBarCustomize" and other settings affect
these changes.  

If I get a chance, I'll try to make up a page that covers these settings
and which registry keys and settings you should be using.  I hope this is
helpful.  Happy hacking!

Andrew Mutch
Library Systems Technician
Waterford Township Public Library
Waterford, MI


On Wed, 14 Mar 2001, Robert Sullivan wrote:

> >http://www.jsiinc.com/TIP1900/rh1976.htm
> 
> >It outlines a number of registry settings that you can set to lock down IE to
> >prevent patrons from abusing the browser.  However, I've found that many of
> >these settings, like removing specific toolbar buttons, do not work in
> >WindowsNT 4 and Windows9x.
> 
> Technically, they work - but you have to use policies.  (Now that we have our
> Gates PCs, I have seen this for myself.)  It sounds like Andrew is using Win
> 2000 policies, so this would be consistent.
> 
> I was never successful in making them work just by setting them in the
> registry.  I believe this is because IE configures its toolbar at runtime.
> 
> For example, you could get the toolbar the way you like it and note the
> registry settings for the two long binary keys which control this.  During IE
> installation you can set these values and IE will look the way you want - but
> you'll see the default toolbar for a second until it loads yours.
> 
> If you enable NoToolbarCustomize, you'll get the default buttons.  This makes a
> sort of sense if you know IE makes the change at runtime, and you're telling it
> not to allow the account to change the toolbar.
> 
> I would speculate that since the policy editor is making registry changes that
> you could make yourself, there's a way to get this to work without policies;
> perhaps there is another setting which conflicts with the button-removal
> settings.  Someone with time on their hands could probably enable registry
> editing in one of the Gates public accounts and look at the settings.  I'm
> trying to get our lab ready for its National Library Week opening, so I will
> leave that as an exercise for someone else. :-)
> 
> Bob Sullivan                               scp_sulli at sals.edu
> Schenectady County Public Library (NY)     http://www.scpl.org
>