In tip 1137, we were able to limit access using Internet Explorer 4.01 SP1.

With Internet Explorer 5.0, we have additional capabilities.

After installing Internet Explorer 5.0 or greater, use Regedt32 to navigate to:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions

You may notice two REG_Binary entries (NoFindFiles and NoTheaterMode) already configured. These entries can be deleted and re-added as type REG_DWORD values (if you like consistency).

The new restrictions are enabled by setting the REG_DWORD value to 1. Setting an entry to 0 disables the restriction.

The new restrictions are:

<b>
   Restriction            Description
   ----------------------------------------------------------------------
   NoFileOpen             Disables the Open command on the File menu, CTRL+O, and CTRL+L.

   NoFileNew              Disables CTRL+N

   NoBrowserSaveAs        Disables Save and Save As on the File menu.

   NoBrowserOptions       Disables Internet Options on the View menu
                          (disables changing browser settings).

   NoFavorites            Removes Favorites menu, adding to favorites, or organizing favorites.

   NoSelectDownloadDir    Prevents user from being able to select a download folder by
                          not displaying the Save As dialog box when a file is downloaded.

   NoBrowserContextMenu   Disables HTML context menu.

   NoBrowserClose         Disable ALT+F4.

   NoFindFiles            Disables the F3 key.

   NoTheaterMode          Disables the F11 key.</b>
An additional restriction can be configured at:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions

<b>
   Restriction            Description
   ---------------------------------------------------------------------
   NoToolbarOptions       Disables adding, removing, or moving a toolbar.</b>