Stop internet access from address bar

[adamyoung]

we have lanview which blocks access to internet explorer, firefox etc but if a student opens my documents or my computer and types the address in the address bar it allows access.

I remember using a regkey a couple of years ago that blocked this but cant remember what it is

Thanks!

[Dos_Box]

Are the pupils in question allowed internet access anyway?

[webman]

I think the registry key is:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\Explorer\Toolbars\Restrictions
"NoAddressBar"=dword:00000001

[ChrisH]

I think that only works on UNC paths..

[kingswood]

Yes- this has been a real pain for us this last year. I'd be interested in any responses that show how to sack this one real good...

Paul :-)

[adamyoung]

Are the pupils in question allowed internet access anyway?

They are normally, we just use lanview to disable it if it is proving more of a distraction than a resource

[wesleyw]

User Configuation> Administrative Templates>Windows Components>Internet Explorer> IE Toolbars

This will disable both IE and Explorer.

I heard that this can occasionly cause IE to lock up though so be careful.


In regards to the earlier reply to disable IE via the registry I found this at Microsoft:

http://support.microsoft.com/?kbid=823057

Restriction values in the HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Int ernet Explorer\Toolbars\Restrictions registry key
The following toolbar restriction values reside in the following registry key:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Int ernet Explorer\Toolbars\Restrictions


When the following menu has been restricted by using the appropriate registry DWORD value, users may receive the following error message:

The operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.


• NoToolbarOptions: The user receives the error message when they try to click any command on the View menu except Customize and Lock the Toolbars.

The following menus are removed when the appropriate registry DWORD value is added:

• NoToolBar: Removes the toolbar. However you can add standard buttons on the View Toolbar menu. To completely enable this setting, you must enable the NoToolbarOptions DWORD value.
• NoAddressBar: Removes the Address bar.
• NoLinksBar: Removes the Link bar. The user receives the following error message when they try to click Links on the Toolbar menu:
The operation has been canceled due to restrictions in effect on this computer. Please contact your system administrator.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Int ernet Explorer\Toolbars\Restrictions]
"NoToolBar"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\Explorer\Toolbars\Restrictions]
"NoToolBar"=dword:00000001

If the pupils are allowed favourites or the run command they can still have access to the internet. A way around this would be to setup a GPO with all of the Internet proxy settings blank and all options to change them greyed out. Then you could move the users to that GPO and remotely update the policy to that PC or PCs.

Sorry to have written such a long reply. ops:

[ChrisH]

This is far too much faffing around just to stop them getting on the internet. You need a proxy that will let you define rooms and computers so you can deny them access that way. It's a lot easier in the long run.

[wesleyw]

I have to agree its a lot of trouble, you could use something like Aventis ContentCache on an ISA Server that would do the same it can block use by class or user or group! I believe there's a linux program that can as well will have to find out.

[ChrisH]

I have split the post regarding using IP Cop and Smoothwall as a proxy to prevent internet access to Here as it was goign off topic :P

[adamyoung]

Is it possible somewhere in the registery to remove the address bar from explorer windows but not when internet explorer is launched using the IE icon on the desktop.

The registery command NoAddressBar removes it from both file windows and internet explorer.

I was thinking, if it was removed from just Internet Explorer than this will solve the lanview problem of students being able to get round it.

[webman]

We have an RM CC3 network, and our pupils don't have the address bar in Win Explorer but do have it in IE. So it's technically possible

[mseaney]

I've just installed the latest pre-release new build version of NetOp 4 last week. The problem with students using 'My Documents' to surfer the web has been fixed. NetOp now blocks this avenue.

[adamyoung]

we have lanview which blocks access to internet explorer, firefox etc but if a student opens my documents or my computer and types the address in the address bar it allows access.

I remember using a regkey a couple of years ago that blocked this but cant remember what it is

Thanks!

I can't take the credit for this one, Mark (a fellow techie at my school) worked out a reg change that would do it (attached)