[WEB4LIB] SOLVED Re: Re: Internet Explorer Restrictions

[Andrew I. Mutch]

I've posted an initial list of restrictions for IE 5.x here:

http://tln.lib.mi.us/~amutch/pro/ie/restrictions.htm

I will add more as I get time.  Enjoy!

Andrew Mutch
Library Systems Technician
Waterford Township Public Library
Waterford, MI


On Wed, 14 Mar 2001, Andrew I. Mutch wrote:

> I had encountered the same problem that Bob had with the toolbar buttons.
> Now that I've figured out the fix in Win2K, I'm betting this works in
> other versions of Windows.
> 
> OK, here's the fix that works:
> 
> 1) First, ignore the settings listed in the JSI Tip and the MS KB articles
> and use this registry key for the tool bar buttons:
> 
> HKEY_CURRENT_USER[OR
> LOCAL_MACHINE]\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\
> 
> 2) Next, add this REG_DWORD key and set its value to 1
> 
> SpecifyButtonsDefault
> 
> If you don't enable this setting, the button settings won't work.
> 
> 3) Most important, add your button restrictions as REG_DWORD keys such as:
> 
> Btn_Back [for the Back Button]
> 
> and set its value to 2
> 
> 2!  Strange, yes? It is but that's what we discovered in Win2K using the
> Group Policies and comparing the restrictions against the Registry.  I
> went back and discovered that the same information could be found in the
> files that are created by IEAK when you set Browser restrictions.  
> 
> I've tested this on a Win2K laptop with IE 5.5 SP1 by directly editing the
> Registry, not using Group Policies.  But, I'm going to bet that this will
> also work on WindowsNT and Windows98.  Still to be tested is how other
> registry settings like "NoToolBarCustomize" and other settings affect
> these changes.  
> 
> If I get a chance, I'll try to make up a page that covers these settings
> and which registry keys and settings you should be using.  I hope this is
> helpful.  Happy hacking!
> 
> Andrew Mutch
> Library Systems Technician
> Waterford Township Public Library
> Waterford, MI
> 
> 
> On Wed, 14 Mar 2001, Robert Sullivan wrote:
> 
> > >http://www.jsiinc.com/TIP1900/rh1976.htm
> > 
> > >It outlines a number of registry settings that you can set to lock down IE to
> > >prevent patrons from abusing the browser.  However, I've found that many of
> > >these settings, like removing specific toolbar buttons, do not work in
> > >WindowsNT 4 and Windows9x.
> > 
> > Technically, they work - but you have to use policies.  (Now that we have our
> > Gates PCs, I have seen this for myself.)  It sounds like Andrew is using Win
> > 2000 policies, so this would be consistent.
> > 
> > I was never successful in making them work just by setting them in the
> > registry.  I believe this is because IE configures its toolbar at runtime.
> > 
> > For example, you could get the toolbar the way you like it and note the
> > registry settings for the two long binary keys which control this.  During IE
> > installation you can set these values and IE will look the way you want - but
> > you'll see the default toolbar for a second until it loads yours.
> > 
> > If you enable NoToolbarCustomize, you'll get the default buttons.  This makes a
> > sort of sense if you know IE makes the change at runtime, and you're telling it
> > not to allow the account to change the toolbar.
> > 
> > I would speculate that since the policy editor is making registry changes that
> > you could make yourself, there's a way to get this to work without policies;
> > perhaps there is another setting which conflicts with the button-removal
> > settings.  Someone with time on their hands could probably enable registry
> > editing in one of the Gates public accounts and look at the settings.  I'm
> > trying to get our lab ready for its National Library Week opening, so I will
> > leave that as an exercise for someone else. :-)
> > 
> > Bob Sullivan                               scp_sulli at sals.edu
> > Schenectady County Public Library (NY)     http://www.scpl.org
> > 
> 
>