Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to prevent a user from accessing tools under IE9


02 Mar 2012   #1

Windows 7 32-bit
 
 
How to prevent a user from accessing tools under IE9

Hello,


Since Microsoft has decided to not develop a Windows 7 version of Steady Sate. I have been following their documentation Creating_a_Steady_State_by_Using_Microsoft_Technologies.doc, Group_Policy_Settings_for_Creating_a_Steady State.doc and Windows SteadyState Reference Spreadsheet.xlsx.
We have a number of Public Access PC on our network. With Steady State I was able to prevent these PC from browsing our network, or viewing any files or folders on the PC itself. I have all the group policy changes suggested above plus a bunch more, so far 135 total.
The Public Access PC is set up with autologin the user localmachine\PublicUser with only user permissions.


How do you prevent a user from accessing tools under Internet Explorer 9 and/or View Downloads?


Example why I want to block this access.
Under this user you can go open IE9 then access to Tools by either Alt + X or clicking on the gear icon next to the Home and Favorite icon. Then open up View Downloads or jump straight to View Downloads by Ctrl + J in IE9. Once in the default download location the user then clicks on options on the bottom left of the screen. This brings up another pop up and if the user then clicks on the Browse Button he gets a nice little notice that reads
This operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.”
Now the crazy part.
When the user clicks OK for the notice they get a new Windows Explorer window. In the Navigation pane it allows the user to the view the network. We have network discovery and file sharing turned off, so when the user clicks on Network they get a nice notice about network discovery and file sharing is turned off. If they click on the notice, a new pop up comes up with the option “Turn on network discovery and file sharing”. If the user clicks on it they get the pop up called User Account Control
So now I have turned of User Account Control Behavior of the elevation prompt for standard users. I had already set a policy to keep the user from accessing all drives from my computer. But when this Explorer Window the user can open up they had access to their my documents, libraries, music.


The real point is the user should not able to see or access anything. Once they get the operation has been canceled message it should take them straight back to the web browser not open a Windows Explorer Window.


Thanks for your assistance,
Greg


My System SpecsSystem Spec
.

10 Mar 2012   #2

Windows 7 x64
 
 

No matter what you do, consider setting up LUA+SRP as well.
Software Restriction Policy
My System SpecsSystem Spec
Reply

 How to prevent a user from accessing tools under IE9




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:59 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33