Preventing IE Downloads

[Deitel]

Hi all,

I am trying to prevent a shared computer from downloading files via IE. I have winxp installed and i tried to use a registry setting described as follows:

User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Internet Settings\Zones\3]
Value Name: 1803
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = downloads enabled, 3 = downloads disabled)

this is found at: http://www.winguides.com/registry/display.php/901/

My problem is that it doesn't work. I have tried another one which prevents the user being able to save the file, but he can still open it which downloads the file anyway.

Any idea on how I can either get the above patch to work, or how to prevent the user fdrom being able to click on open would be really appreciated.

Thanks

[mrmister1]

You might want to check here. That may help you.

[ktkendall]

I've disable my kids PC for downloads under internet options>Security tab> custom level, and if you go down a bit you'll see where you can disable downloads. Only problem in your case may be I do not see any way to prevent the user from changing the setting back if they find it.

[Statica]

Go to START > RUN > gpedit.msc ; this will open the Group Policy Editor
Now navigate to: Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > Restrict File Download.
There should be 3 policies that you can turn on. Select Each and read the descriptions, if you wish to enable them, double click on them and turn them to enable.

You might also wish to engage other security policies like: Restricting activex installation, protection from zone elevation etc.
HTH