locked
Loophole in IE7 import/export favourites RRS feed

  • Question

  • Hi, (i'm running XP Pro SP2 with SteadyState 2.0)

    I discovered that in the locked account it's locked down pretty tight except that from the IE7 favourites button (the one with the green plus sign), user will be able to view ALL files in the blocked drive!

    IE7-->favourites button (green plus sign)-->Import/Export-->Next-->Export Favourites-->Next(Favourites Source folder)-->Browse(Favourites Destination)

    After clicking Browse, there's a "My Network Places" on the left. Click that will show all shared folders and able to view all files in the shared folders despite all drives have been blocked/hidden in SteadyState.

    Are we able to disable the Favourites button, or disable Import/Export, or a workaround to disable "My Network Places" from showing up?


    Part 2:
    are we able to disable IE7 from launching outlook express? this happens when user tried to Send Page by email.

    Rgds,
    kat
    Monday, May 26, 2008 3:37 PM

Answers

  •  

    Hi Kat, we can use the following group policy to disable favorites button:

     

    1.       Start – Run – gpedit.msc, press Enter.

    2.       Locate the following policy:

     

    User Configuration – Administrative Templates – Windows Components – Internet Explorer – Browser menus – Hide Favorites menu.

     

    3.       Enable this policy.

     

    Regarding OE related issue, you can refer to the following threads:

     

    Remove the 'Mail' Icon in IE

    http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1763195&SiteID=17

     

    Disable access to additional items in IE

    http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2143708&SiteID=17

     

    Hope this helps!

    Thursday, May 29, 2008 7:53 AM
  •  

    Hi Kat, you can use the following group policy to disable the function in IE:

     

    Administrative Templates\Windows Components\Internet Explorer\Disable importing and exporting of favorites and feeds

    Monday, June 2, 2008 9:14 AM

All replies

  •  

    Hi Kat, we can use the following group policy to disable favorites button:

     

    1.       Start – Run – gpedit.msc, press Enter.

    2.       Locate the following policy:

     

    User Configuration – Administrative Templates – Windows Components – Internet Explorer – Browser menus – Hide Favorites menu.

     

    3.       Enable this policy.

     

    Regarding OE related issue, you can refer to the following threads:

     

    Remove the 'Mail' Icon in IE

    http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1763195&SiteID=17

     

    Disable access to additional items in IE

    http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2143708&SiteID=17

     

    Hope this helps!

    Thursday, May 29, 2008 7:53 AM
  • Hi Sean,
    the gpedit doesn't solve the issue. it will disable "add to favourites" and "organize favourites" but user can still click on the favourtie button (with a plus sign) and use Import/Export. and going through this route will have the issue of user being able to view all shared folders via the "My Network Places" button, despite the drive has been blocked in SS.

    is there a way to remove the favourites toolbar?


    part 2:
    OE issue solved, thanks.


    rgds,
    kat
    Thursday, May 29, 2008 2:12 PM
  •  

    Hi Kat, you can use the following group policy to disable the function in IE:

     

    Administrative Templates\Windows Components\Internet Explorer\Disable importing and exporting of favorites and feeds

    Monday, June 2, 2008 9:14 AM