A. Additional restrictions can be applied to IE 4.01 Service Pack 2 and IE 5.0 which have an updated Shdocvw.dll.

The restrictions below should be added to HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions of type DWORD value. Set to 1 to be enable, 0 to disable.

NoFileOpen Disables Open command on File menu, CTRL+O, and CTRL+L.
NoFileNew Disables CTRL+N NoBrowserSaveAs Disables Save and Save As on the File menu.
NoBrowserOptions Disables Internet Options on the View menu (disables changing browser settings).
NoFavorites No Favorites menu, adding to favorites, or organizing favorites.
NoSelectDownloadDir Prevents user from being able to select download folder by not displaying the Save As dialog box when a file is downloaded.
NoBrowserContextMenu Disables HTML context menu.
NoBrowserClose Disable ALT+F4.
NoFindFiles Disables the F3 key.
NoTheaterMode Disables the F11 key.

NoFindFiles and NoTheaterMode are created by default during the installation of Service Pack 2 but are of type BINARY due to limitations of .inf files. You can, if you wish, delete and recreate these as DWORD values.

To prevent users from customizing the IE5 Icons & toolbar edit the following HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions\NoToolbarOption).

Also under HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, add the value NoBandCustomize (REG_Dword) to stop changing buttons. Add the value NoToolbarCustomize (REG_DWORD) to remove the 'customize' option from the toolbar right click menu. Value 0=enabled 1=disabled.