+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Active Content In IE Policy in Technical; Hi, Wondering if anyone might be able to offer some much needed advise on this one. Our Year 10 students ...
  1. #1

    Join Date
    Dec 2007
    Posts
    140
    Thank Post
    12
    Thanked 2 Times in 2 Posts
    Rep Power
    13

    Active Content In IE Policy

    Hi,

    Wondering if anyone might be able to offer some much needed advise on this one.

    Our Year 10 students are doing a web design project using Serif WebPlus X2. Part of their project is to include active content on their web sites like marquees/rollovers etc.

    On our student Internet Explorer policy we have the option to "Allow active content to run files on my computer" unchecked. Whenever they preview their websites or go to any sites that have active content, the active content does not load nor do they get a prompt giving them the option to allow. We have this all disabled due to security.

    I know the option to "Allow active content to run files on my computer" is a general setting but I was wondering is there anyway to have it disabled without prompt for Internet sites and enabled without prompt for local websites running from a local drive?

    Also if we were to allow it with prompts what security implications does this have? for example students don't have read/write permissions to the C drive so even if some dodgy active content was allowed through would it be able to do any damage?

    Thanks in advance.
    Adam.

  2. #2
    dayzd's Avatar
    Join Date
    Nov 2009
    Location
    In front of computer
    Posts
    396
    Thank Post
    71
    Thanked 59 Times in 48 Posts
    Rep Power
    23
    Not sure if it'll help, but you could create a 'My Computer' security zone...
    How to Enable the My Computer Security Zone in Internet Options

    It should allow you to set the 'active content from this computer' rule for local content, then leave it off in your other internet zones. I think (I've only fiddled with this personally. I've never used it on a full network). Don't know if you can control the new zone from AD, though.
    Last edited by dayzd; 13th January 2010 at 02:53 PM. Reason: Poor link formatting

  3. #3

    Join Date
    Dec 2007
    Posts
    140
    Thank Post
    12
    Thanked 2 Times in 2 Posts
    Rep Power
    13
    Gave it a go following the microsoft kb but the my computer zone doesn't want to appear. We are using IE7 and Microsoft don't mention you can do it on this version?

    Could be wrong though......

  4. #4
    dayzd's Avatar
    Join Date
    Nov 2009
    Location
    In front of computer
    Posts
    396
    Thank Post
    71
    Thanked 59 Times in 48 Posts
    Rep Power
    23
    Ah... you're right. IE7 isn't on the list. Bummer.

    In which case, I'm not sure if you can do what I suggested...

  5. Thanks to dayzd from:

    ahunter (14th January 2010)

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by ahunter View Post
    On our student Internet Explorer policy we have the option to "Allow active content to run files on my computer" unchecked. Whenever they preview their websites or go to any sites that have active content, the active content does not load nor do they get a prompt giving them the option to allow. We have this all disabled due to security.

    I know the option to "Allow active content to run files on my computer" is a general setting but I was wondering is there anyway to have it disabled without prompt for Internet sites and enabled without prompt for local websites running from a local drive?
    The "Allow active content to run files on my computer" setting only applies to files and sites directly loaded from the local computer and so excludeds all external internet sites, simply enabling this setting should allow the computers to run the local content as you require.

    Quote Originally Posted by ahunter View Post
    Also if we were to allow it with prompts what security implications does this have? for example students don't have read/write permissions to the C drive so even if some dodgy active content was allowed through would it be able to do any damage?
    It depends on the threat, most stuff is well contained with user privilages and they would in general only be able to trash their own profiles but there are numerous security holes in IE and any other browser so the most malicious content can still cause havoc even on a locked down PC. This is where good filtering and AV come in to play along with a cost, benifit weigh up as to whether the active content is worth a little extra risk. We don't have to many issues with it as locked down accounts do prevent most things from getting through.

  7. Thanks to SYNACK from:

    ahunter (14th January 2010)

  8. #6

    Join Date
    Dec 2007
    Posts
    140
    Thank Post
    12
    Thanked 2 Times in 2 Posts
    Rep Power
    13
    Your right, I had allow active content to run files on my computer enabled at my last school and for the 4 years I was there I can't say we had any issues related back to any malicious active content causing damage, like you say good AV and filtering should stop 95% of most things.

    I'll see what the boss thinks!

  9. #7

    Join Date
    Dec 2007
    Posts
    140
    Thank Post
    12
    Thanked 2 Times in 2 Posts
    Rep Power
    13
    Found this completely by accident while I was replying this morning:

    Run active content from my computer - Group Policy fix

    Going to roll with this fix I think does exactly what I want.

    Thanks again!

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  2. Group Policy within active directory
    By jman167 in forum Windows
    Replies: 5
    Last Post: 19th June 2007, 08:58 PM
  3. Content Providers
    By ctbjs in forum Virtual Learning Platforms
    Replies: 5
    Last Post: 5th May 2007, 07:57 AM
  4. Content filtering
    By mitcheln in forum School ICT Policies
    Replies: 11
    Last Post: 20th December 2006, 08:38 PM
  5. Replies: 0
    Last Post: 23rd May 2006, 10:03 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •