hide/lock security tab in options

is it possible to to hide , control or lock the security options in OE 6, so users can't change security settings (like changing virus protection)

something like group policy or registry option

In article ,
says...
is it possible to to hide , control or lock the security options in OE 6, so users can't change security settings (like changing virus protection)

something like group policy or registry option

Yup, User configuration\Administrative Templates\Windows Components
\Internet Explorer\Internet Control Panel\"Disable the Security page"

You also have several other settings under Computer Configuration
\Administrative Templates\Windows Components\Internet Explorer:

Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites

In addition, you can customize the zones from:
User Configuration\Windows Settings\Internet Explorer Maintenance
\Security

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

Marin Marinov said in
om:
In article ,
says...
is it possible to to hide , control or lock the security options in
OE 6, so users can't change security settings (like changing virus
protection)

something like group policy or registry option

Yup, User configuration\Administrative Templates\Windows Components
\Internet Explorer\Internet Control Panel\"Disable the Security page"

You also have several other settings under Computer Configuration
\Administrative Templates\Windows Components\Internet Explorer:

Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites

In addition, you can customize the zones from:
User Configuration\Windows Settings\Internet Explorer Maintenance
\Security

HTH

Note that blocking access to Internet Options using these policy
settings only keeps users from that applet from within IE. They can
still use the Internet Options applet in Control Panel.

--
__________________________________________________ __________
*** Post replies to newsgroup. Share with others.
*** Email domain = ".com" *AND* append "=NEWS=" to Subject.
__________________________________________________ __________

snip
Note that blocking access to Internet Options using these policy
settings only keeps users from that applet from within IE. They can
still use the Internet Options applet in Control Panel.

No, they can't. Physically it's absolutely the same dialog fired up from
two different places. Once you enable "Disable the Security page"
setting the tab is gone. Where have you observed this?
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

Marin Marinov said in
om:
snip
Note that blocking access to Internet Options using these policy
settings only keeps users from that applet from within IE. They can
still use the Internet Options applet in Control Panel.

No, they can't. Physically it's absolutely the same dialog fired up
from two different places. Once you enable "Disable the Security page"
setting the tab is gone. Where have you observed this?

The following registry key blocks access to the Internet Options applet
but *only* when called from within IE:

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions

NoBrowserOptions = 0 or omitted (enabled)
= 1 (disabled)

This tweak can be set/cleared in several utilities, like Spybot. The
applet itself is not restricted, only calling it from within IE is
disabled.

I didn't know what registry keys or value names get created or modified
for the group policy settings you mentioned. So I ran Installwatch to
take a snapshot, changed the policy (to enable the disable of the
Security tab, and the same for the other tabs), analyzed the changes
made to the registry, and found it alters:

HKCU\Software\Microsoft\Windows\CurrentVersion\Gro up Policy
Objects\LocalUser\Software\Policies\Microsoft\Inte rnet Explorer\Control
Panel
AdvancedTab = 1
ConnectionsTab = 1
ContentTab = 1
GeneralTab = 1
PrivacyTab = 1
ProgramsTab = 1
SecurityTab = 1

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
AdvancedTab = 1
ConnectionsTab = 1
ContentTab = 1
GeneralTab = 1
PrivacyTab = 1
ProgramsTab = 1
SecurityTab = 1

When I opened the Internet Options applet (either through IE, Control
Panel, or inetcpl.cpl), the Security tab was indeed missing. When I
disabled all tabs then I would get the prompt that access was denied.
Thanks for the heads up. I had been disappointed with other utilities
that supposedly locked out the Internet Options applet but only did so
when called from within IE.

--
__________________________________________________ __________
*** Post replies to newsgroup. Share with others.
*** Email domain = ".com" *AND* append "=NEWS=" to Subject.
__________________________________________________ __________

thanks Marin for your help,

that doesn't work for Outlook express (OE),
it does work only for IE..??
i can still change OE security settings after applying those GPO settings

thanks

snip
I'm glad I provoked your interest and "hunger for knowledge"

--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.

In article ,
says...
thanks Marin for your help,

that doesn't work for Outlook express (OE),
it does work only for IE..??
i can still change OE security settings after applying those GPO settings

thanks

Nope, it doesn't, these are two different dialogs. There doesn't seem to
be any other setting than "Block attachments" for OE and I haven't been
able to dig up the registry keys that get set. You can try monitoring
where OE saves its settings using a registry monitor like RegMon from
www.sysinternals.com and then extend the GPO settings with a custom
administrative template file. Sorry I can't give you a better solution

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.