Sixth, IE settings hand to come
Microsoft's Internet Explorer allows us to easily navigate the Internet, but in order to use Internet Explorer, you must configure it. In Internet Explorer's "Internet Options" window, there are more comprehensive setting options (such as "Home", "Temporary Folder", "Security Level" and "Grade Review"), but some advanced features are not available. Provided, and these features are easily implemented through Group Policy. Let's look at the specific example:
Location: "Group Policy Console → User Configuration → Administrative Templates → Windows Components → Internet Explorer (to add intres.adm template file)"
1. Disable the "Open in new window" menu item (Windows 2000/XP/2003)
For security reasons, sometimes it is necessary to block some of IE's function menus. Group Policy provides a wealth of setup items, such as Disable "Save As...", "File", "New", and so on. Let's take a look at the specific setting method as an example of "Disabling the 'Open in new window' menu item".
Open "Group Policy Console → User Configuration → Administrative Templates → Windows Components → Internet Explorer → Browser Menu", then open "Disable ‘Open in New Window' menu item” and set it to “Enable”. When the policy is enabled, the user will not work when you right-click on a link and then click Open in New Window. This policy can be used with the 'File' menu to disable the 'New' menu item, which prohibits the user from opening the browser in a new window by clicking the File menu, pointing to New, and then clicking Window. As shown in Figure 8, the "New → Window" item is no longer available).
Figure 8
Tip: After enabling this policy, click the "Open in new window" command, you will not be able to open the link in a new window, the system will prompt the user that the command is invalid, the page is automatically opened The window is also completely banned, in fact, this can also achieve the effect of blocking the pop-up advertising window.
2. Restricting the saving function of IE browser (Windows 2000/XP/2003)
In the process of using IE to browse the webpage, when you encounter good pictures, articles and other resources, you can use the "Save As" function to save it to the local hard disk. In order to keep the hard disk clean and tidy when multiple people share a computer, it is necessary to limit the browser's saving function. So how can this be done? You can do this by opening the "Group Policy Console → User Configuration → Administrative Templates → Windows Components → Internet Explorer → Browser Menu" and then the "Files Menu: Disabled" in the right pane. Save as... menu item, 'file' menu: disable saving as web menu item', 'view' menu: disable 'source file' menu item' and disable context menu all enabled can.
If you don't want others to change the settings of Internet Explorer, you can enable the "Tools menu: Disable 'Internet Options...'" policy. In addition, other items can be disabled in this pane depending on the individual's needs.
3. Disabling the "Internet Options" Control Panel (Windows 2000/XP/2003)
The above mentioned "Disable Internet Options" feature, which can be used to prevent others from setting up IE casually. This method cannot specifically disable the control template project in the Internet option, thus causing trouble for the specific application. This can be achieved by the following group policy setting method:
Open "Group Policy Console → User Configuration → Administrative Templates → Windows Components → Internet Explorer → Internet Control Panel", in the right pane we can see Go to the Group Policy item such as "Disable regular page", "Disable security page". Let's take the example of "Disabling regular pages" as follows: Open "Disable regular pages" in the right pane and set it to "Enable". Then we open the Internet Options Control Panel and notice that the "General" project is gone (Figure 9), so users will not be able to see and change the settings for the Home, Cache, History, Page Appearance, and Accessibility features. The policy will delete the "General" tab on the interface, so if this policy is set, there is no need to set such as "Disable change home page settings", "Disable change color" in "User Configuration → Administrative Templates → Windows Components → Internet Explorer" Set" and other strategies.
Figure 9
4. It is forbidden to modify the homepage of IE browser (Windows 2000/XP/2003)
If you don't want others to make any changes to the IE browser homepage you set, you can open Group Policy Console→User Configuration→Administrative Templates→ Windows Components → Internet Explorer → Toolbars, then select the Disable Change Home Page Settings group policy and enable it. In addition, in this pane, the disable function of items such as "Change History Settings", "Change Color Settings", and "Change Internet Temporary File Settings" are also provided.
When this policy is enabled, the settings in the Home area of the General tab of the IE browser will be grayed out in the Internet Options dialog box.
Hint: If you set the "Disable General Pages" policy in "Group Policy Console → User Configuration → Administrative Templates → Windows Components → Internet Explorer → Internet Explorer Control Panel", you do not need to set this policy because "disabled" The General Pages policy will remove the General tab on the interface.