Feb 1, 2012
tom

Disabling IE add-ons and toolbars with Group Policy?

Question

I’d love to have the peace of mind of knowing that none of my desktops have toolbars, “browser helpers” or any other crap like that running.

Has anybody done this successfully with Group Policy?

I found this article, but it’s not all that clear:

http://support.microsoft.com/kb/883256

If I want to ban all plugins but the Google Toolbar, Flash & Windows Update on XP, there isn’t a clear explanation on how to do it. It seems that I would have to know the ClassID of every toolbar I would like to allow.

The article doesn’t really go into how an admin would find these ClassIDs. Does Flash have a different ClassID for each version? Does it vary by OS? What about Windows Update on XP boxes – it requires a plugin that would need to be expressly enabled.

It’s such a common problem that there should be an easy solution. It would be great if there was just a checkbox list of common plugins, so you could enable Flash for everyone, Google Toolbar for devs, Windows Update for XP, etc.

Asked by John Hoge

Answer

Disabling the option “Enable third-party browser extensions” under Tools -> Internet Options -> Advanced (or Control Panel -> Internet Options) successfully disables most browser bars while still allowing the typical plugins (Java, Flash, etc).

If I recall correctly you can control this option in GP.
Setting can be found under ‘User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> Allow third-party browser extensions’

Answered by Phoric

Related posts:

  1. Disabling applications through group-policy
  2. Opening html files from desktop causes Internet Explorer to open with add-ons disabled
  3. Add Group Policy by Script
  4. Add IUSR_Machine to group using group policy
  5. Is it possible to add a local user to the admins group through group policy?

Leave a comment