Microsoft KB Archive/314237

= Internet Explorer Administration Kit Restrictions Are Not Applied to Users =

Article ID: 314237

Article Last Modified on 1/28/2002

-

APPLIES TO


 * Microsoft Internet Explorer Administration Kit 6.0

-



This article was previously published under Q314237



SYMPTOMS
You can use the Internet Explorer Administration Kit (IEAK) to create a build of Microsoft Internet Explorer that sets a user restriction. For example, you may want to restrict access to the Connections tab when a user clicks Internet Options on the Tools menu. The Internet Explorer package may be installed successfully for the administrator who initiates the installation, but the restriction is not in effect for subsequent users and new users.



CAUSE
This behavior occurs because no user has permission to modify any of the values under the Policies key in the registry. Attempts to use this type of branding on a per-user basis under the individual user security context do not work.

This behavior is caused not by the IEAK, but in the registry, where the following key is locked down:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies

The IEAK attempts to set this registry entry correctly, but cannot because the user does not have the correct permissions.



WORKAROUND
Policies are locked down by the time that the .ins file is processed. The only way to change settings without unlocking the Policies key is by using Group Policy objects (GPOs).



STATUS
This behavior is by design.

Keywords: kbfix kbenv kbprb KB314237

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.