gpedit - control IE access

smos585

Hi, I wonder if the experts on here know how to use the Windows (XP) group policy (gpedit) to lock down internet explorer settings.

The background is that we are setting up a number of PCs for a a local community partnership for public access. We have locked down most things, but it occurs to me that notwithstanding what we have done so far, users can still change things like home pages etc.

I have had a look at the gpedit user config/admin templates/
windows componenets/IE settings but is not clear to me what we need to do to ensure that users don't mess around with the IE settings.

To save time we are focusing on IE rather than other browsers at this time.

aerostar

I have not used this, but looks as though it could solve a lot of problems.

http://www.cybercafepro.com/free-internet-cafe-software.php

Another couple

http://www.opera.com/support/mastering/kiosk/

http://www.handycafe.com/

smos585

Thank you, very useful. I may well need to go down that path if indeed I can't work out how to use gpedit to lock the IE settings

Most of the other features such as locking the hdd and denying access to the control panel, security/firewall/browsing restrictions etc are all already there.

gaming_guy

http://www.grouppolicy.biz/2010/02/how-to-use-group-policy-to-configure-home-page-settings-part-1/

A good guide there. You can also hide the internet settings completely if you need to, by looking in user config/admin templates/windows componenets/IE settings/internet control panel.

smos585

Thank you, I have tried various gpedit settings such as disabling secondary home page (also reserves first home page), also disabling all IE internet options, but the ..... google appears to be able to overwrite settings.

We have the limited user accounts set to delete browsing history on exit, so each time google opens (second home page) up pops the option to make Google THE home page. If you click yes it overwrites the first home page and creates a subsequent error.

Just wonder if there is a workaround? Or somewhere where I can find ways of limiting what ideas Google thinks of next. I appreciate that if we can't find a simple solution we may have to go back to the drawing board and consider "internetcafe" solutions.

Many thanks.