Internet Explorer Restrictions
The following is in collaboration with jstolz from The Windows Registry Guide
Backup the registry and/or export the following keys: go to Start>Run,
type regedit. Navigate to:
HKEY_CURRENT_USER\Software\Policies\Microsoft
Right-click on the Microsoft key, choose new>Key, name it Internet
Explorer, right-click on the Internet Explorer key, choose new>Key, name it
Restrictions. Then you'll need to right-click on the Restrictions key and type
in the following DWORD values. Right-click on each one you create, choose modify
and type in the number 0. Now export the entire Restrictions key. Now you have
an easy way to undo the restrictions when you need to do maintenance on the
machine. No go back, right-click on each and type in the number 1 to enforce the
restriction.
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Restrictions
-
NoBrowserBars=dword:00000001 ;removes the Standard
Buttons, Address Bar and Links Bar completely...requires NoToolbarOptions (see
below) to be effective
-
NoBrowserClose=dword:00000001 ;disables the option of
closing Internet Explorer & ALT+F4.
- NoBrowserContextMenu=dword:00000001 ;disables right-click context
menu.
- NoBrowserOptions=dword:00000001 ;disables the Tools / Internet
Options menu.
- NoBrowserSaveAs=dword:00000001 ;disables the ability to Save
As.
- NoFavorites=dword:00000001 ;disables the Favorites.
- NoFileNew=dword:00000001 ;disables the File / New command and
CTRL+N.
- NoFileOpen=dword:00000001 ;disables the File / Open command and
CTRL+O, and CTRL+L.
- NoSelectDownloadDir=dword:00000001 ; Disable the option of
selecting a download directory.
- NoTheaterMode=dword:00000001 ;disables the Full Screen view option
and F11 key.
- NoHelpMenu=dword:00000001 ;disables the entire Help menu.
- NoHelpItemNetscapeHelp=dword:00000001 ;removes the "For Netscape
Users" menu item.
- NoHelpItemSendFeedback=dword:00000001 ;removes the "Send Feedback"
menu item.
- NoHelpItemTipOfTheDay=dword:00000001 ;removes the "Tip of the Day"
menu item.
- NoHelpItemTutorial=dword:00000001 ;removes the "Tour" (Tutorial)
menu item.
- NoOpeninNewWnd=dword:00000001 ;disables new Browser window,
- NoViewSource=dword:00000001 ;disables View>Source from the IE
menu.
- NoNavButtons=dword:00000001 ;Greys out the forward and back
buttons.
- NoPrinting=dword:00000001 ;removes PrintPreview and Print from the
File menu. (IE5.5+)
- AlwaysPromptWhenDownload=dword:00000001 ;greys out the Open button in the File Download box.
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Toolbars\Restrictions
- NoAddressBar=dword:00000001 ;hides the Address bar...requires
NoToolbarOptions to be effective.
- NoToolBar=dword:00000001 ;hides the Standard buttons...requires
NoToolbarOptions to be effective.
- NoLinksBar=dword:00000001 ;hides the Links bar...requires
NoToolbarOptions to be effective.
- NoToolbarOptions=dword:00000001 ;prevents enabling the above by the
user by right-clicking or from the View
menu.
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Control Panel
The same applies to this key. If the keys are not present, add them as shown
above.
- Advanced=dword:00000001 ;disables any changes under Advanced
Tab.
- Autoconfig=dword:00000001 ;disables Auto Configuration under
Dial-up settings.
- Profiles=dword:00000001 ;disables Profile Assistant button.
- Accessibility=dword:00000001 ;disables all options under
Accessibility.
- HomePage=dword:00000001 ;grays out all buttons and edit box.
- Links=dword:00000001 ;disables changing links colors.
- Languages=dword:00000001 ;disables any Language changes.
- Certificates=dword:00000001 ;disables Certificates & Publishers
buttons.
- Wallet=dword:00000001 ;disables Microsoft Wallet.
- History=dword:00000001 ;disables Days to keep & Clear History
Button.
- Colors=dword:00000001 ;disables changing of colors.
- Fonts=dword:00000001 ;disables changing fonts.
- Ratings=dword:00000001 ;disables Content Advisor.
- Cache=dword:00000001 ;disables changing amount of space &
moving of folder.
- GeneralTab=dword:00000001 ;removes entire tab.
- SecurityTab=dword:00000001 ;removes entire tab.
- ContentTab=dword:00000001 ;removes entire tab.
- PrivacyTab=dword:00000001 ;removes entire tab (IE6).
- ConnectionsTab=dword:00000001 ;removes entire tab.
- Connection Wizard=dword:00000001 ;disables the Internet Connection Wizard.
- Connection Settings=dword:00000001 ;disables all connection
settings (should be used with Connwiz Admin Lock).
- ProgramsTab=dword:00000001 ;removes entire tab.
- AdvancedTab=dword:00000001 ;removes entire tab.
- Messaging=dword:00000001 ;prevents changing E-Mail, Newsgroups, or
Internet Call options.
- CertifPers=dword:00000001 ;prevents changing Certificate
options.
- CertifSite=dword:00000001 ;removes the Personal tab from
Certificate manager.
- CertPub=dword:00000001 ;removes the Publisher button.
- Certificates=dword:00000001 ;removes the Publisher button from the
Content tab.
- SecChangeSettings=dword:00000001 ;prevents changing Security Levels
for the Internet Zone.
- SecAddSites=dword:00000001 ;prevents adding Sites to ANY
zone.
- FormSuggest=dword:00000001 ;disables AutoComplete for forms.
- FormSuggest Passwords=dword:00000001 ;prevents Prompt me to save
password from being displayed.
- Connwiz Admin Lock=dword:00000001 ;disables the Internet Connection
Wizard.
- CalendarContact=dword:00000001 ;prevents changes to Calendar and
Contact list.
- Settings=dword:00000001 ;prevents any changes to Temporary Internet
Files.
- ResetWebSettings=dword:00000001 ;disables the Reset web Setting
button.
- Check_If_Default=dword:00000001 ;disables Perform Security Check
before dialing on Connections tab.
- Proxy=dword:00000001 ;prevents changes to proxy server
settings.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- NoBandCustomize=dword:00000001 ;removes ability to change toolbars
in Explorer & IE.
- NoInternetIcon=dword:00000001 ;removes the Internet icon from the
desktop.
- NoWindowsUpdate=dword:00000001 ;removes Windows update from Start
Menu|Settings. and IE's Tools menu.
- NoExpandedNewMenu=dword:00000001 ;removes New>Message, Post,
Contact, & Internet Call from IE's File menu.
- NoFileUrl=dword:00000001 ;disables the ability to browse the local
file system using IE's File>Open menu.
- NoRun=dword:00000001 ;disables the Run command on Start menu, and
prevents you from being able to gain access to any local files using the
Address box.
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet
Explorer\Infodelivery\Restrictions
- NoSearchCustomization=dword:00000001 ;disables the Customize entry
for changing settings.
- NoBrowserSaveWebComplete=dword:00000001 ;disables Save As Web Page
Complete from File>Save As...
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
These additionad settings also control some various Internet Explorer
restrictions. The scenario as show below resticts the History, Favorites, Mail,
Edit, Discussions,Encoding, and Media buttons. The value of 00000002 hides the
button. NOTE: SpecifyDefaultButtons must be set to 00000001 to be effective.
- Btn_Back=dword:00000000 ;the Back Button is visible.
- Btn_Forward=dword:00000000
;the Forward Button is visible.
- Btn_Stop=dword:00000000 ;the Stop
Button is visible.
- Btn_Refresh=dword:00000000
the Refresh Button is visible.
- Btn_Home=dword:00000000
;the Home Button is visible.
- Btn_Search=dword:00000000
;the Search Button is visible.
- Btn_History=dword:00000002
;the History Button is NOT visible.
- Btn_Favorites=dword:00000002
;the Favorites Button is NOT visible.
- Btn_Folders=dword:00000000
;the Folders Button is visible....not selected by default.
- Btn_Fullscreen=dword:00000000
;the Fullscreen Button is visible...not selected by default.
- Btn_Tools=dword:00000000
;the Tools Button is visible......not selected by default.
- Btn_MailNews=dword:00000002
;the Mail Button is NOT visible.
- Btn_Size=dword:00000000
;the Font Size Button is visible......not selected by default
- Btn_Print=dword:00000000
;the Print Button is visible.
- Btn_PrintPreview=dword:0000000
;the Print Preview Button is NOT visible.
- Btn_Edit=dword:00000002
;the Edit Button is NOT visible.
- Btn_Discussions=dword:00000002
;the Discussions Button is NOT visible.....if you have Office
installed.
- Btn_Cut=dword:00000000
;the Cut
Button is visible......not selected by default
- Btn_Copy=dword:00000000
;the Copy Button is visible......not selected by default
- Btn_Paste=dword:00000000
;the Paste Button is visible......not selected by default
- Btn_Encoding=dword:00000002
;the Encoding Button is NOT visible......not selected by default
- Btn_Media=dword:00000002
;the Media Button is NOT visible......IE6 only.
- NoNavButtons=dword:00000002
;the both Forward and Back buttons are disabled.
- SmallIcons=yes
;Show small icons on the toolbar.
- SpecifyDefaultButtons=dword:00000001
;must be set to 1 to enable the button restrictions above.
- NoExpandedNewMenu=dword:00000001
;removes New Message, New Post, New Contact, and New Internet Call
from the File menu.
- NoWindowsUpdate=dword:00000001
;removes the Windows Update entry from the Tools menu.
- NoInternetIcon=dword:00000001
;removes the Internet Explorer icon from the desktop.
Remember,
some settings require Windows be restarted before they take affect.