If you use Internet Explorer and want to restrict other users from changing IE settings using Internet Options dialog box, this tutorial will definitely help you.
In this tutorial, we'll learn how to restrict users from enabling/disabling options in a particular tab, accessing a particular tab or completely hiding a tab from the user.
As you can see in the following screenshot, we have disabled the "Advanced" tab completely and "Connections", "Content", "Privacy", "Programs" and "Security" tabs are hidden from user:
So without wasting time, here are the steps to restrict users from changing Internet Explorer settings using Internet Options dialog box:
1. Type regedit in RUN or start menu search box and press Enter. It'll open Registry Editor.
2. Now go to following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Create a new key "Control Panel" under "Internet Explorer" key.
3. Now to restrict an option, disable a tab or hide a tab, you'll need to create a new DWORD value in right-side pane and set its value to 1
We are providing the DWORD value names and their description so that you can choose the desired one and create it in right-side pane and set its value to 1 to make it working:
Accessibility - Disables options in "Accessibility" window in "General" tab
Advanced - Disables options in "Advanced" tab
AdvancedTab - Completely hides "Advanced" tab
Autoconfig - Disables "Automatic Configuration" section in "LAN Settings" window under "Connections" tab
Cache - Restricts changes to Temporary Internet Files settings
CalendarContact - Restricts changes to Calender and Contact List options
Certificates - Restricts changes to Security Certificates in "Content" tab
CertifPers - Restricts changes to Personal Certificates in "Content" tab
CertifPub - Restricts changes to Publisher Certificates in "Content" tab
CertifSite - Restricts changes to Site Certificates in "Content" tab
Check_If_Default - Restricts checking IE as default browser in "Programs" tab
Colors - Restricts changes to "Colors" window in "General" tab
Connection Settings - Disables options in "Connections" tab
Connection Wizard - Disables Internet Connection Wizard
ConnectionsTab - Completely hides "Connections" tab
Connwiz Admin Lock - Disables "Setup Internet Connection" button in "Connections" tab
ContentTab - Completely hides "Content" tab
Fonts - Disables options in "Fonts" window in "General" tab
FormSuggest - Disables AutoComplete Settings for Forms in "Content" tab
FormSuggest Passwords - Disables AutoComplete Settings for Passwords in "Content" tab
GeneralTab - Completely hides "General" tab
History - Restricts changes to History settings in "General" tab
HomePage - Restricts changes to Home page settings in "General" tab
Languages - Restricts changes to "Languages" window in "General" tab
Links - Restricts changes to Links settings in "General" tab
Messaging - Restricts changes to E-mail, Newsgroups, Internet call options in "Programs" tab
Privacy Settings - Restricts changs to Cookies settings in "Privacy" tab
PrivacyTab - Completely hides "Privacy" tab
Profiles - Restricts changes to Profiles in "Content" tab
ProgramsTab - Completely hides "Programs" tab
Proxy - Disables "Proxy server" section in "LAN Settings" window under "Connections" tab
Ratings - Restricts changes to "Content Advisor" settings in "Content" tab
ResetWebSettings - Disables "Reset Web Settings" button in "Programs" tab
SecAddSites - Disables "Sites" button in "Security" tab
SecChangeSettings - Restricts changes to Security Level in "Security" tab
SecurityTab - Completely hides "Security" tab
Settings - Restricts changes to Temporary Internet Files options
For example, if you want to hide "Advanced" tab, create new DWORD value AdvancedTab and set its value to 1
4. If you want to disable the whole "Internet Options" window from Tools menu, go to following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Create a new key "Restrictions" under "Internet Explorer" key. In right-side pane, create a new DWORD value NoBrowserOptions and set its value to 1
NOTE: To remove the restriction, either change DWORD value to 0 or delete the DWORD value.
PS: If you want a ready-made registry script to do the task automatically, download following ZIP file, extract it and run the extracted REG file:
Posted by: Vishal Gupta | Categories: Internet Explorer, Troubleshooting
lynn
I disabled delete search history through my registry for when someone accesses my internet explorer options - no problem. The PROBLEM now is, you can still delete search history manually through internet explorer's star menu (where you locate favorites)in the upper right hand side. If I right click on a site in the history, and hit delete, it's gone. So why is this possible when it should be disabled through the registry?
VG
^^ Thats by design and programing of IE. You cant change that.
Jason
Thanks for the information.
On my current machine, under Internet Options and Connections, when I select LAN Settings the entire resulting options are grayed out and locked. Is there a key for this? I tried setting Proxy and Autoconfig to 0, restarted IE7 but that did not unlock the LAN Settings options.
VG
^^ What keys and string, dword values do you see in following key:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\
Export the above key and paste the content here.
PKY
i applied this setting its working but when i login with different user id then its showing same ,plz tell me if i want change explorer setting for all users then from where i have to change.....
VG
^^ To restrict all user accounts, create the keys under HKEY_LOCAL_MACHINE instead of HKEY_CURRENT_USER.
JD
I am searching for a way to disable, so I can enable, the Remove button in Internet Options - Content - Other People. Using user or admin permissions to IE will not enable the button. I can remove the certificates listed in the Other People folder using the Certificate Manage snap-in but have yet to find out why the button is disabled in IE. I do not see anything in HKLM or HKCU that would have disabled it and have yet to see a GPO, system is on a domain, that would have done it. Nothing in local policy either. Any ideas?