O'Reilly logo

Windows Vista Security: Praxisorientierte Sicherheit für Profis by Marcus Nasarek

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

863
Chapter 28
CHAPTER 28
Navigating Internet Explorer 7 Policies28
Internet Explorer 7 is included with Windows Vista. For the first time since Group
Policy was introduced, you can fully manage Internet Explorer 7’s registry-based set-
tings using Group Policy. This means you can manage most features of Internet
Explorer in one place without having to use the Internet Explorer Maintenance
(IEM) extension or the Internet Explorer Administration Kit (IEAK). Not only does
this give you a consistent way to manage the configuration of Internet Explorer 7 for
both users and computers, but it also makes managing the configuration of Internet
Explorer 7 much easier. This chapter provides a quick reference to the approxi-
mately 200 policy settings for Internet Explorer 7.
Getting Started with Internet Explorer 7 Policy Settings
Internet Explorer 7 is the version of Internet Explorer that ships with Windows
Vista. To apply changes to Internet Explorer-related settings in policy, you must
refresh policy, but no reboot or logoff is required.
Internet Explorer 7 policy settings are located in Computer Configuration\Administra-
tive Templates\Windows Components\Internet Explorer, and in User Configuration\
Administrative Templates\Windows Components\Internet Explorer.
Using Internet Explorer 7 Policy Settings
Internet Explorer 7 settings can be divided into two broad categories:
Policy settings with exclusions
Policy settings with exclusions apply only when Internet Explorer 7 is used with
certain operating systems and configurations.
Policy settings without exclusions
Policy settings without exclusions apply only to Windows operating systems
running Internet Explorer 7.
864
|
Chapter 28: Navigating Internet Explorer 7 Policies
Table 28-1 lists policies with specific exclusions. The “Scope” column specifies whether
the policy setting is found under Computer Configuration, User Configuration, or both.
Table 28-2 lists policies applicable regardless of which version of Windows is run-
ning Internet Explorer 7. The “Scope” column specifies whether the policy setting is
found under Computer Configuration, User Configuration, or both.
Table 28-1. Internet Explorer 7 policies and their applicable configurations
Scope Policy setting Description Applicable configuration
Computer/
User
Turn on Protected Mode When enabled, Protected Mode is turned on to
protect Internet Explorer from exploited vulner-
abilities by reducing the locations that Internet
Explorer can write to in the registry and the file-
system. When disabled, Protected Mode will be
turned off. When not configured, users will be
able to turn Protected Mode on and off.
Applicable when Internet
Explorer 7 is running on
Windows Vista or later
User Turn on Internet Connec-
tion Wizard Auto Detect
When enabled, the Internet Connection Wizard
is launched automatically if it was not com-
pleted previously. The user cannot prevent the
wizard from launching. When disabled, the
Internet Connection Wizard is not launched
automatically. The user can launch the wizard
manually. If not configured, the user will have
the freedom to decide whether the Internet
Connection Wizard should be launched auto-
matically.
Not applicable when Inter-
net Explorer 7 is running on
Windows Vista
Computer/
User
Prevent participation in
the Customer Experience
Improvement Program
When enabled, this prevents users from partici-
pating in the Customer Experience Improve-
ment Program (CEIP) and removes the
Customer Feedback Options menu item from
the Help menu. When disabled, users must par-
ticipate in the CEIP. It also removes the Cus-
tomer Feedback Options menu item from the
Help menu. If not configured, users can choose
to participate in the CEIP.
Not applicable when Inter-
net Explorer 7 is running on
Windows Vista
Table 28-2. Internet Explorer 7 policies for all operating systems
Scope Policy setting Description
Computer/
User
Add a specific list of
search providers to the
users search provider list
When enabled, the user can add and remove search providers, but only from the
set of search providers specified in the list of search provider policy keys (found
under [HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\Search-
Scopes]). If disabled or not configured, the user will be able to configure his
search provider list unless another policy setting is restricting such configuration.
Computer/
User
All Processes When enabled, a script running in any of the processes on the machine can per-
form a clipboard operation without prompting. This means that if the zone behav-
ior is currently set to Prompt, it will be bypassed and enabled. When disabled, a
script running in any of the processes on the machine cannot bypass the prompt
for cut, copy, or paste operations from the clipboard. If not configured, current val-
ues of the URL action for the application/processes on the machine prevail.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required