Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I need to Block access to the IE browser for a couple of restricted users.
I've looked through gpedit.msc
I've seen a "software settings" section...but its empty. I expected to see a list of programs to add/remove...or something.
Is this were program access can be limited on a user by user basis?
Any Advice appreciated.
THANKS!

You can go into Tools, Internet Options, Content, Settings, type in your administrator password, and go to approved sites (which is in fact approved and not approved sites) where you can enter specific sites that no one can get to except the administrator with a password. In fact, I think the only way the administrator can get to them is by remov-ing them from the unapproved list. If you go to those sties a lot, its a nuisance, but it is doable.

Should have added that this does not block access to IE itself, which is maybe what you want, more than blocking access to specific sites.

I haven't tried myself but it should be possible to block access using the security service, Control Panel -> Administrative Tools -> Local Security Policies. Read the help files there and good luck.

if your drive is ntfs then you can set individual files permissions on the executable file iexplore.exe denying specific users access. make sure SYSTEM and administrators always have full access.

Well....I still need IE to be accessible buy the admin account. However....the NTSF may be a possibility. I will need to check if the file structure is that or FAT. I think it is the latter (may be able to re-format, though).
However.....with NTSF....can any file type have restrictions set....down to individual users? And...can this apply to directories as well (e.g. a directory being read only...etc)?
THANKS

Semi clever thought;
Remove the icon and remove it from the start>programs list.
You would then have to browse to the folder to open it.I guess this would depend on how savvy your users were. For example my wife would be all done but my 10 yr old would probably get it.
:)Jimi_l

You can go to control panel/administrative tools/local security settings. Then expand the software restriction policies folder. If you don't have any yet you go to action and make a new path rule(browse to c:/program files/internet exployer/iexplore.exe) and set it to disallow after that there will be 2 subfolders and 3 other objects in the software restriction policies folder, one will be "enforcement" right click on properties and then where it says apply software restriction policies to the following users, tick "all users except local administors" and then only administrators should be able to use it.

![]() |
dual boot
|
Background display proble...
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |