Microsoft KB Archive/931805

= How to apply restrictions to Internet Explorer 6 with Service Pack 1 (SP1) in Microsoft SoftGrid =

Article ID: 931805

Article Last Modified on 5/17/2007

-

APPLIES TO


 * Microsoft SoftGrid for Terminal Services
 * Microsoft SoftGrid for Windows Desktops

-



Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



INTRODUCTION
This article discusses how to apply restrictions to Internet Explorer 6 with Service Pack 1 (SP1) in the Microsoft SoftGrid virtual environment. The restrictions are applied by modifying the virtual registry. The registry modifications can be performed when a sequence is created, updated, or streamed.

You can apply restrictions to Internet Explorer by using one of the following methods:
 * Method 1: Use the Group Policy Object Editor from the Sequencer
 * Method 2: Apply registry modifications to the virtual registry
 * Method 3: Use the .reg file from the SoftGrid Client
 * Method 4: Use the  element from the SoftGrid Client



MORE INFORMATION
As examples, this article describes how to remove the Open command on the File menu and how to remove the Windows Update command on the Tools menu. For a complete listing of restrictions, see the following Microsoft Knowledge Base article:

823057 The restrictions that are available to Internet Explorer 6.0 Service Pack 1

Note Windows Update modifications that are made by using the Group Policy Object Editor apply to the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Windows Update

Changes that are made manually apply to the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Method 1: Use the Group Policy Object Editor from the Sequencer
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

This method uses the Policy Editor from the Sequencer to apply the restriction registry modifications to the Virtual Registry.
 * 1) During the monitoring phase of the Installation Wizard, start the Group Policy Object Editor (Gpedit.msc).
 * 2) Expand Local Computer Policy, expand User Configuration, expand Administrative Templates, expand Windows Components, expand Internet Explorer, and then expand Browser menus.
 * 3) On the File menu, right-click Disable Open, and then click Properties.
 * 4) Click Enabled, and then click OK.
 * 5) Expand Local Computer Policy, expand User Configuration, expand Administrative Templates, expand Windows Components, and then expand Windows Update.
 * 6) Right-click Remove access to use all Windows Update features, and then click Properties.
 * 7) Click Enabled, and then click OK.
 * 8) Exit the Group Policy Object Editor.

The Group Policy Object Editor makes two registry modifications to enable the policies. Because the modifications were made by the Winlogon process, the Sequencer does not capture them. Therefore, you must export the registry modifications to a .reg file, and then you must import the modifications. The Sequencer will capture the modifications during the import operations. To do this, follow these steps:  Open Registry Editor. Locate and then right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

 Click Export. Save the Restrictions.reg file to the desktop. Locate and then right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Windows Update

 Click Export.</li> Save the Windowsupdate.reg file to the desktop.</li> Exit Registry Editor.</li> Right-click Restrictions.reg, and then click Merge.</li> Right-click Windowsupdate.reg, and then click Merge.</li> Click Stop Monitoring, and then complete the wizard.</li> Save the sequence.</li></ol>

Method 2: Apply registry modifications to the virtual registry.
Use Registry Editor from the Sequencer to apply the restriction registry modifications to the virtual registry. <ol> During the monitoring phase of the Installation Wizard, start Registry Editor.</li> Locate and right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

</li> Point to New, and then click DWORD Value.</li> In New Value #1, type NoFileOpen .</li> Right-click NoFileOpen, and then click Modify.</li> In Value data, type 1, and then click OK.</li> Locate and then right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

</li> Right-click Explorer, point to New, and then click DWORD Value.</li> In New Value #1, type NoWindowsUpdate .</li> Right-click NoWindowsUpdate, and then click Modify.</li> <li>In Value data, type 1, and then click OK.</li> <li>Exit Registry Editor.</li> <li>Click Stop Monitoring, and then complete the wizard.</li> <li>Save the sequence.</li></ol>

Method 3: Use the .reg file from the SoftGrid Client
You must modify the .osd file to apply the restriction registry modifications to the Virtual Registry. These steps are performed when you start an application by using the <SCRIPT> element to import a .reg file. To create the .reg file, the registry must be modified and exported. These modifications should be performed from the sequencing station without the Sequencer running. <ol> <li>Start Registry Editor.</li> <li>Locate and then right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

</li> <li>Point to New, and then click DWORD Value.</li> <li>In New Value #1, type NoFileOpen .</li> <li>Right-click NoFileOpen, and then click Modify.</li> <li>In Value data, type 1, and then click OK.</li> <li>Right-click Restrictions, click Export, and then save the .reg file.</li> <li>Locate and then right-click the following registry subkey:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

</li> <li>Point to New, and then click DWORD Value.</li> <li>In New Value #1, type NoWindowsUpdate .</li> <li>Right-click NoWindowsUpdate, and then click Modify.</li> <li>In Value data, type 1, and then click OK.</li> <li>Right-click Explorer, click Export, and then save the .reg file.</li> <li>Exit Registry Editor.</li> <li> Merge the .reg files into a single file. Review the files for information that should not be imported, as shown in the following .reg file. Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions] &quot;NoFileOpen&quot;=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] &quot;NoWindowsUpdate&quot;=dword:00000001 The .reg file can exist within the sequence or in a remote network location. Make sure that the user who is starting the application has access to the .reg file. </li> <li>Edit the .osd file by using a text editor.</li> <li> Enter the <SCRIPT> element and child elements in the <DEPENDENCY> element as follows. <DEPENDENCY> <SCRIPT TIMING=&quot;PRE&quot; EVENT=&quot;LAUNCH&quot; PROTECT=&quot;TRUE&quot; WAIT=&quot;TRUE&quot;> <HREF>%SystemRoot%\regedit.exe /s &quot;PATH/FILENAME.reg&quot;</HREF> </SCRIPT> </DEPENDENCY> </li> <li>Save the .osd file, and then close the text editor.</li></ol>

Method 4: Use the <REGISTRY> element from the SoftGrid Client
This section outlines how to modify the .osd file to apply the restriction modifications to the virtual registry every time that an application starts. These steps are performed when the application starts by using the <REGISTRY> element. <ol> <li>Edit the .osd file by using a text editor.</li> <li> Enter the <REGISTRY> element and child elements within the <VIRTUALENV> element as follows. <VIRTUALENV> <REGISTRY> <REGKEY HIVE=&quot;HKCU&quot; KEY=&quot;Software\Policies\Microsoft\Internet Explorer\Restrictions&quot;> <REGVALUE REGTYPE=&quot;REG_DWORD&quot; NAME=&quot;NoFileOpen&quot;>1</REGVALUE> </REGKEY> <REGKEY HIVE=&quot;HKCU&quot; KEY=&quot;Software\Microsoft\Windows\CurrentVersion\Policies\Explorer&quot;> <REGVALUE REGTYPE=&quot;REG_DWORD&quot; NAME=&quot;NoWindowsUpdate&quot;>1</REGVALUE> </REGKEY> </REGISTRY> </VIRTUALENV> </li> <li>Save the .osd file, and then exit the text editor.</li></ol>

Keywords: kbexpertiseinter kbhowto KB931805

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.