Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: How to prevent a user from accessing tools under IE9

02 Mar 2012   #1

Windows 7 32-bit
How to prevent a user from accessing tools under IE9


Since Microsoft has decided to not develop a Windows 7 version of Steady Sate. I have been following their documentation Creating_a_Steady_State_by_Using_Microsoft_Technologies.doc, Group_Policy_Settings_for_Creating_a_Steady State.doc and Windows SteadyState Reference Spreadsheet.xlsx.
We have a number of Public Access PC on our network. With Steady State I was able to prevent these PC from browsing our network, or viewing any files or folders on the PC itself. I have all the group policy changes suggested above plus a bunch more, so far 135 total.
The Public Access PC is set up with autologin the user localmachine\PublicUser with only user permissions.

How do you prevent a user from accessing tools under Internet Explorer 9 and/or View Downloads?

Example why I want to block this access.
Under this user you can go open IE9 then access to Tools by either Alt + X or clicking on the gear icon next to the Home and Favorite icon. Then open up View Downloads or jump straight to View Downloads by Ctrl + J in IE9. Once in the default download location the user then clicks on options on the bottom left of the screen. This brings up another pop up and if the user then clicks on the Browse Button he gets a nice little notice that reads
This operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.”
Now the crazy part.
When the user clicks OK for the notice they get a new Windows Explorer window. In the Navigation pane it allows the user to the view the network. We have network discovery and file sharing turned off, so when the user clicks on Network they get a nice notice about network discovery and file sharing is turned off. If they click on the notice, a new pop up comes up with the option “Turn on network discovery and file sharing”. If the user clicks on it they get the pop up called User Account Control
So now I have turned of User Account Control Behavior of the elevation prompt for standard users. I had already set a policy to keep the user from accessing all drives from my computer. But when this Explorer Window the user can open up they had access to their my documents, libraries, music.

The real point is the user should not able to see or access anything. Once they get the operation has been canceled message it should take them straight back to the web browser not open a Windows Explorer Window.

Thanks for your assistance,

My System SpecsSystem Spec
10 Mar 2012   #2

Windows 10 x64

No matter what you do, consider setting up LUA+SRP as well.
Software Restriction Policy
My System SpecsSystem Spec

 How to prevent a user from accessing tools under IE9

Thread Tools

Similar help and support threads
Thread Forum
Installing rights to standard user or prevent an admin user something
I tried to google this and it seems neither is possible but I wanted to hear the truths from the horses mouth. I have a Win 7 Pro x64 computer with 2 users who boths needs to be able (this really is a must) install software on the computer but they can't have access to each other's private...
General Discussion
Prevent Windows 7 from accessing 2nd Hard Drive.
I have a 2nd hard drive that goes into sleep mode when not in use after 20 minutes (the windows default). However, it always seems to turn itself on even if I have 0 programs running.. (Everything unchecked from start up and non-MS services). How do I prevent it from starting up unless I...
Hardware & Devices
What could be the reason prevent win7 from accessing router's USB HDD
HI, All The issue was really puzzled me. My WD portable HDD (1.5T) was attached to an USB port of my Asus RT-N66U router, Samba file sharing is enabled using the same workgroup name. I had 2 computers, one is WinXP desktop, one is Lenovo T500 (Win7 64bits Pro) laptop. There are 2 VMs (WinXP...
Network & Sharing
Prevent Windows 7 from accessing/seeing other drives?
Hi there, I installed a second HDD on my laptop that can have up to 4 different HDD. I have a XP running on the first HDD. I just installed Windows 7 Premium 32bit on the second HDD. When the installation was done, Windows 7 can see and access the folders/files/drives from the first HDD. How do...
Installation & Setup
How Do I Prevent my 13 Year Old from accessing "Adult" Content?
Windows seven has a built in Parental Control Section. However the only options I see are the option to control time usage, Games and Ability to use programs on the computer. There are no "Internet controls" that will prevent him from watching Adult material "Accidentally" or not, or sites that...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 06:16.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App