Re: Disable changing history settings

You are right. Setting those settings is only ment to protect the GUI.

But if you apply this policy and someone alters it in the registry the
setting you have configured via gpo should come back on next refresh I
believe.
Have you tested?

--
G Johansson
fantomen@xxxxxxxxxxxxxxx

"Dave" <wedidwtc@xxxxxxxxx> skrev i meddelandet
news:1187891330.051146.65570@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have enabled the "Disable changing history settings" in a group
policy. This does gray out the box in Internet Explorer, but doesn't
stop me from going into HKEY_CURRENT_USER in the registry and changing
the DaysToKeep value to anything I want.

Is there something wrong here with my system/setup or is "Disable
changing history settings" only meant to protect the IE GUI interface?
Am I supposed to be setting manual permissions on the registry during
logon to protect that key or something else?

I could see how blocking access to regedit would help, but that
doesn't stop another rogue program from altering the values, as long
as it doesn't go through the IE GUI.

What is the "right way" to lock down IE?



.

Relevant Pages

  • Re: Restrictions message
    ... | I imagine that unticking the checkboxes in Spybot did to the registry ... |>> after I had switched to Bellsouth DSL and canceled and went back ... |> I don't know what this has to do with Outlook Express, ... you can unlock by unchecking the option to "Protect IE ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Ideas on screen saver oddity
    ... Thanks for the response again and for the heads-up on that one registry key ... Under your Screen Saver tab, do you see On resume, password protect or On ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Winforms, Shown Event and SetEnvironmentVariable
    ... the environment variables wind up in the registry anyway. ... Assuming .NET took that advice, it makes me wonder if there's some sort of interaction with the broadcast of that message, but I don't know what it would be. ... That would explain why the console application works fine, as it may skip the window message broadcasting, or at least not having a window itself would not wind up being a recursive bottleneck in the broadcast. ... You do not need to subscribe to the ProgressChanged event, and even if you do, the subscriber does not need to be a GUI component. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Registry Cleaners and Fixes for XP
    ... Are you sure the free version of AVG does not protect the computer well? ... AVG free detected 2 Trojans which my Norton which I have paid for did not detect. ... If you ever think your Registry needs cleaning, ... registry alone and don't use any registry cleaner. ...
    (microsoft.public.windowsxp.general)
  • Re: Lawyer Dad that killed molester outcome Police: Girl wasnt molested by neighbor
    ... The registries are a political tool used to manipulate fear. ... Protect the children gets votes, donations, ... Each state get a lot of money to implement ... the registry, there was no incentive to say no from the get go. ...
    (alt.true-crime)