Tools/Options menu (W2K)

[uofmluke]

Has anyone successfully removed the tools menus or all the items in it?

[reghakr]

uofmluke,

Here's the entire reg script to lock down Internet Explorer. I have removed diable registry tools so you people don't get locked out. I'd put a shortcut to Regedit on the desktop.

I would suggest editting the file in Notepad and change the 00000001 entries to 00000000, so you have an instant undo policy. The NoDrives value should also be set to 0, the 4 means the c: drive is not seen. First, change all DWORDs 00000001 and 00000002 to 00000000, change HEX vakues from 01,00,00,00 to 00,00,00,00, then export that as an undo file.

============BEGINCUT===========
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoDriveTypeAutoRun"=hex:95,00,00,00
"EditLevel"=dword:00000000
"NoSaveSettings"=hex:00,00,00,00
"DisableRegistryTools"=dword:00000000
"NoStartBanner"=hex:00,00,00,00
"CDRAutoRun"=hex:00,00,00,00
"NoBandCustomize"=dword:00000001
"NoStartMenuSubFolders"=dword:00000001
"ClassicShell"=dword:00000000
"NoCommonGroups"=dword:00000001
"RestrictRun"=dword:00000000
"NoNetConnectDisconnect"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoNavButtons"=dword:00000000
"NoToolbarCustomize"=dword:00000001
"NoRecentDocsHistory"=dword:00000000
"NoFavoritesMenu"=hex:01,00,00,00
"NoRecentDocsMenu"=hex:01,00,00,00
"NoRun"=dword:00000001
"NoContextMenu"=dword:00000001
"Btn_Back"=dword:00000000
"Btn_Forward"=dword:00000000
"Btn_Stop"=dword:00000000
"Btn_Refresh"=dword:00000000
"Btn_Home"=dword:00000000
"Btn_Search"=dword:00000000
"Btn_History"=dword:00000002
"Btn_Favorites"=dword:00000002
"Btn_Folders"=dword:00000000
"Btn_Fullscreen"=dword:00000000
"Btn_Tools"=dword:00000000
"Btn_MailNews"=dword:00000002
"Btn_Size"=dword:00000000
"Btn_Print"=dword:00000000
"Btn_Edit"=dword:00000002
"Btn_Discussions"=dword:00000002
"Btn_Cut"=dword:00000000
"Btn_Copy"=dword:00000000
"Btn_Paste"=dword:00000000
"Btn_Encoding"=dword:00000002
"SpecifyDefaultButtons"=dword:00000001
"Btn_Media"=dword:00000002
"NoSetTaskbar"=dword:00000001
"NoActiveDesktop"=dword:00000001
"NoExpandedNewMenu"=dword:00000001
"NoChangeStartMenu"=dword:00000001
"NoViewContextMenu"=dword:00000001
"NoWinKeys"=dword:00000001
"NoControlPanel"=dword:00000001
"NoNetworkConnections"=dword:00000001
"NoShellSearchButton"=dword:00000001
"NoSMHelp"=dword:00000000
"NoWindowsUpdate"=dword:00000001
"NoTrayContextMenu"=dword:00000001
"NoSetFolders"=dword:00000001
"NoNetHood"=dword:00000001
"NoInternetIcon"=dword:00000001
"NoFind"=dword:00000001
"NoDesktop"=dword:00000000
"NoDrives"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
"DisableTaskMgr"=dword:00000001
"DisableChangePassword"=dword:00000001
"DisableLockWorkstation"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\system]
"dontdisplaylastusername"=dword:00000001
"shutdownwithoutlogon"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Control Panel]
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Connection Settings"=dword:00000001
"Connection Wizard"=dword:00000001
"Advanced"=dword:00000001
"Profiles"=dword:00000001
"Accessibility"=dword:00000001
"HomePage"=dword:00000001
"links"=dword:00000001
"Languages"=dword:00000001
"Certificates"=dword:00000001
"Wallet"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"Fonts"=dword:00000001
"Ratings"=dword:00000001
"Cache"=dword:00000001
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Messaging"=dword:00000001
"CertifPers"=dword:00000001
"CertifSite"=dword:00000001
"SecChangeSettings"=dword:00000001
"SecAddSites"=dword:00000001
"FormSuggest"=dword:00000000
"FormSuggest Passwords"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"CalendarContact"=dword:00000001
"Settings"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Restrictions]
"NoBrowserClose"=dword:00000000
"NoBrowserBar"=dword:00000000
"NoBrowserContextMenu"=dword:00000001
"NoBrowserOptions"=dword:00000001
"NoBrowserSaveAs"=dword:00000000
"NoFavorites"=dword:00000001
"NoFileNew"=dword:00000001
"NoFileOpen"=dword:00000001
"NoFindFiles"=dword:00000001
"NoHelpMenu"=dword:00000001
"NoOpeninNewWnd"=dword:00000000
"NoNavButtons"=dword:00000000
"NoPrinting"=dword:00000001
"NoSelectDownloadDir"=dword:00000000
"NoTheaterMode"=dword:00000001
"NoViewSource"=dword:00000001
"RestGoMenu"=dword:00000001

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Toolbars]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Toolbars\Restrictions]
"NoAddressBar"=dword:00000000
"NoLinksBar"=dword:00000000
"NoToolbar"=dword:00000000
"NoToolbarOptions"=dword:00000001
============ENDCUT==============

To lock it down even more, you can download Resource Hacker and grey out toolbar commands by editting the browselc.dll file.. Here's a dpownload link:
<a target="_blank" href=http://www.rpi.net.au/~ajohnson/resourcehacker/>http://www.rpi.net.au/~ajohnson/resourcehacker/</a>

reghakr

[uofmluke]

wow, thank you. The key[HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoHelpMenu] disables the Help menu, is there a key that will do the same to the Tools menu? Another option I could try is to grey out all of the undesired options in the Tools menu. Will have to try that next.

[reghakr]

uofmluke,

Not that I know of.

reghakr

[Jama]

Do you want to restrict what users can do in IE, windows or your network?
Are you a control freak?
I have one word for you, therapy!
If that doesn't work then try this &gt;&gt;&gt;


Start - run - then type mmc.
Click Console - Add/Remove Snap-in.
At the Snap-in click Add, choose Group Policy, click Add and then Ok. confused yet?

Expand the tree on the left, select a folder. on the right you'll see the policies within that folder.
Egg:

Select the "Internet Explorer" folder

Local Computer Policy
Administrative Templates
Windows Components
Internet Explorer &lt;&lt;&lt;&lt;&lt;&lt; this one

On the right, you'll see - among others - this:

Security Zones: Do not allow users to change policies Not configured

If you double click and select Enabled, users will NOT be able to edit or change policies.

Tip: this policy Removes the Security tab from the interface in the Internet Options dialog box altogether.

User Configuration
Administrative Templates
Windows Components
Internet Explorer
Internet Control Panel
Disable the Security page

You can do so much here it impossible for me to list them all.
================================================== ========================
1- Right click a folder and select Export List to back-up policy settings
within that folder before you edit those policies.
2- Be sure to read the help files BEFORE you change anything in computer
policy. you have been warned.
================================================== =========================

By default, policies are refreshed "applied" once every 90 minutes.
If you can't wait that long to test your new settings, then type this in the
Run box " Start Menu - Run"

The following line will refresh policies under the "User Configuration" tree
secedit /refreshpolicy user_policy

This one will refresh policies under the "Computer Configuration" tree.
secedit /refreshpolicy machine_policy


Yours

Jama

Show them who's in control, big boy!