Udostępnij za pośrednictwem

“Policy-ing” IE

  • Artykuł

To wrap up my theme of setting policy through registry keys I’ve listed a selection of policy settings for Internet Explorer.

Check out the links for more detailed information for Internet Explorer Security Zones and Group Policy templates. You can also download all the Group Policy ADM files for Windows XP from here.

Policy: Disable importing and exporting of favorites
Description: Prevents users from exporting or importing favorite links by using the Import/Export Wizard. If you enable this policy, the Import/Export Wizard cannot import or export favorite links or cookies, which are small text files that contain settings for Web sites. If you disable this policy or do not configure it, users can import and export favorites in Internet Explorer by clicking the File menu, clicking Import and Export, and then running the Import/Export Wizard.
Note: If you enable this policy, users can still view screens in the wizard, but when users click Finish, a prompt will appear that states that this feature has been disabled.
HKCU\ Software\ Policies\ Microsoft\ Internet Explorer\ DisableImportExportFavorites

Policy: Download signed ActiveX controls
Description: This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded. If you disable the policy setting, signed controls cannot be downloaded. If you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren't trusted. Code signed by trusted publishers is silently downloaded.
HKCU\ Software\ Policies\ Microsoft\ Windows\ CurrentVersion\ Internet Settings\Zones\ 3\ 1001

Policy: Run ActiveX controls and plugins
Description: This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If you enable this policy setting, controls and plug-ins can run without user intervention. If you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run. If you disable this policy setting, controls and plug-ins are prevented from running. If you do not configure this policy setting, controls and plug-ins can run without user intervention.
HKCU\ Software\ Policies\ Microsoft\ Windows\ CurrentVersion\ Internet Settings\Zones\ 3\ 1200

Policy: Allow file downloads
Description: This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered. If you enable this policy setting, files can be downloaded from the zone. If you disable this policy setting, files are prevented from being downloaded from the zone. If you do not configure this policy setting, files can be downloaded from the zone.
HKCU\ Software\ Policies\ Microsoft\ Windows\ CurrentVersion\ Internet Settings\ Zones\ 3\ 1803

Policy: Allow drag and drop or copy and paste files
Description: This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone. If you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone. If you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically.
HKCU\ Software\ Policies\ Microsoft\ Windows\ CurrentVersion\ Internet Settings\ Zones\ 3\ 1802

Policy: Play animations in web pages
Description: This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are affected by this setting; active Web content such as java applets are not. If you enable this policy setting, Internet Explorer will play animated pictures found in Web content. If you disable this policy setting, Internet Explorer will not play or download animated pictures, helping pages display more quickly. If you do not configure this policy setting, Internet Explorer will play animated pictures found in Web content.
HKCU\ Software\ Policies\ Microsoft\ Internet Explorer\ Main\ Play_Animations

Policy: Allow software to run or install even if the signature is invalid
Description: This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the signature is invalid. An invalid signature might indicate that someone has tampered with the file. If you enable this policy setting, users will be prompted to install or run files with an invalid signature. If you disable this policy setting, users cannot run or install files with an invalid signature. If you do not configure this policy, users can choose to run or install files with an invalid signature.
effect.
HKCU\ Software\ Policies\ Microsoft\ Internet Explorer\ Download\ RunInvalidSignatures

Policy: Check for signatures on downloaded programs
Description: This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it hasn't been modified or tampered with) on user computers before downloading executable programs. If you enable this policy setting, Internet Explorer will check the digital signatures of executable programs and display their identities before downloading them to user computers. If you disable this policy setting, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers. If you do not configure this policy, Internet Explorer will not check the digital signatures of executable programs or display their identities before downloading them to user computers.
HKCU\ Software\ Policies\ Microsoft\ Internet Explorer\ Main\ CheckExeSignatures

Policy: Help menu: Remove 'Tip of the Day' menu option
Description: Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer. If you enable this policy, the Tip of the Day command is removed from the Help menu. If you disable this policy or do not configure it, users can enable or disable the Tip of the Day, which appears at the bottom of the browser.
HKCU\ Software\ Policies\ Microsoft\ Internet Explorer\ Restrictions\ NoHelpItemTipOfTheDay

- Lynda

Comments