Tag: Computer Configuration
Security Zones: Do not allow users to add/delete sites
Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this policy the site management settings for security zones are disabled. (To see the site management settings for security zones in the Internet Options dialog box click the Security tab and then click the Sites button. )If you disable this policy or do not configure it users can add Web sites to or remove sites from the Trusted Sites and Restricted Sites zones and alter settings for the Local Intranet zone. This policy prevents users from changing site management settings for security zones established by the administrator. Note: The “Disable the Security page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) which removes the Security tab from the interface takes precedence over this policy. If it is enabled this policy is ignored. Also see the “Security zones: Use only machine settings” policy.
Security Zones: Do not allow users to change policies
Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy the Custom Level button and security-level slider on the Security tab in the Internet Options dialog box are disabled. If you disable this policy or do not configure it users can change the settings for security zones. This policy prevents users from changing security zone settings established by the administrator. Note: The “Disable the Security page” policy (located in -> User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel) which removes the Security tab from Internet Explorer in Control Panel takes precedence over this policy. If it is enabled this policy is ignored. Also see the “Security zones: Use only machine settings” policy.
Turn off URL Suggestions
This policy setting turns off URL Suggestions. URL Suggestions allow users to autocomplete URLs in the address bar based on common URLs. The list of common URLs is stored locally and is updated once a month. No user data is sent over the internet by this feature. If you enable this policy setting URL Suggestions will be turned off. Users will not be able to turn on URL Suggestions. If you disable this policy setting URL Suggestions will be turned on. Users will not be able to turn off URL Suggestions. If you do not configure this policy setting URL Suggestions will be turned on. Users will be able to turn on or turn off URL Suggestions in the Internet Options dialog. By default URL Suggestions are turned on.
Turn off Windows Search AutoComplete
This policy setting allows you to prevent Windows Search AutoComplete from providing results in the Internet Explorer Address bar. Windows Search AutoComplete suggests possible matches when a user is entering a web address in the browser Address bar. This feature provides more relevant results in the browser Address bar. If you enable this policy setting Internet Explorer does not use Windows Search AutoComplete for providing relevant results in the Address bar. The user cannot change this setting. If you disable this policy setting Internet Explorer uses Windows Search AutoComplete to provide relevant results in the Address bar. The user cannot change this setting. If you do not configure this policy setting the user can choose to turn the Use Windows Search setting on or off. Note: If you enable this policy setting feeds do not appear in the Address bar. This does not affect subscribing to feeds and interacting with them through the Favorites Center.
Security Zones: Use only machine settings
Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this policy changes that the user makes to a security zone will apply to all users of that computer. If you disable this policy or do not configure it users of the same computer can establish their own security zone settings. This policy is intended to ensure that security zone settings apply uniformly to the same computer and do not vary from user to user. Also see the “Security zones: Do not allow users to change policies” policy.
Turn off the auto-complete feature for web addresses
This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar. If you enable this policy setting user will not be suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting. If you disable this policy setting user will be suggested matches when entering Web addresses. The user cannot change the auto-complete for web-address setting. If you do not configure this policy setting a user will have the freedom to choose to turn the auto-complete setting for web-addresses on or off.
Prevent the deletion of temporary Internet files and cookies
This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history available by clicking Tools Internet Options and then Delete Browsing History in Internet Explorer. If you enable this policy setting users will not be able to delete temporary Internet files and cookies. If you disable or do not configure this policy setting users will be able to delete temporary Internet files and cookies.
Prevent changing proxy settings
This policy setting specifies if a user can change proxy settings. If you enable this policy setting the user will not be able to configure proxy settings. If you disable or do not configure this policy setting the user can configure proxy settings.
Turn off pop-up management
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting the Control Panel information relating to pop-up management will be unavailable (grayed out) and all other pop-up manager controls notifications and dialog boxes will not appear. Pop-up windows will continue to function as they did in Windows XP Service Pack 1 or earlier although windows launched off screen will continue to be re-positioned onscreen. If you disable or do not configure this policy setting the popup management feature will be functional.
Prevent managing pop-up exception list
You can allow pop-ups from specific websites by adding the sites to the exception list. If you enable this policy setting the user cannot add websites to or remove websites from the exception list. If you disable or do not configure this policy setting the user can add websites to or remove websites from the exception list. Note: You can allow a default list of sites that can open pop-up windows regardless of the Internet Explorer process’s Pop-Up Blocker settings by enabling the “Specify pop-up allow list” policy setting.