How to Disable Internet Options Through GPO

Internet Explorer and other browsers provide a group of options for users to use to customize and secure their browsing experience. Users can change the settings on their own computers at any time unless a Group Policy Object, or GPO, is created to manage Internet options remotely. GPOs are best for networks or home computers with a single administrative account and multiple nonadministrative accounts. All Internet options can be changed or disabled through a GPO.

Things You'll Need

• Active Directory (networks only)

Instructions

1. Log in to either your home computer or Active Directory server with the administrator account. Access to the Group Policy Object Editor may be restricted on other types of user accounts.

2. Open "Active Directory Users and Computers" for network computers.

   For home computers, go to "Start" and select either "Run" or "Search." Windows Vista and higher must select "Search." Type "gpedit.msc." Skip to Step 7 to continue.

3. Right click the users, group or computer you want to disable Internet options on and choose "Properties."

4. Select the "Group Policy" tab.

5. Press "New" and type a name for the new GPO.

6. Select the name of the new GPO and press "Edit."

7. Expand the following if disabling Internet options for a computer: "Computer Configuration," "Administrative Templates," "Windows Components" and "Internet Explorer."

   Expand the following if disable Internet options for a user or group of users: "User Configuration," "Administrative Templates," "Windows Components" and "Internet Explorer."

8. Expand "Internet Control Panel" to view all Internet option restrictions.

9. Right click any option and choose "Properties." Choose whether to configure, enable or disable the option.

10. Press "Apply" to save changes.

11. Exit the Group Policy Object Editor.

12. Restart your computer if you are a home user. Wait for the server settings to replicate to all users and computers if you are on a network.

Tips & Warnings

• If you are using a browser other than Internet Explorer, you can change your browser options by either locating the name of your browser--for instance, look for Firefox instead of Internet Explorer--or by viewing the "Software" section of the Group Policy Object Editor.

• If a user is logged in before the settings take effect, the Internet options will not be disabled until the user logs off and back on.

References

• Microsoft Technet: Managing Browser Settings with Group Policy Tools
• Microsoft MSDN: Group Policy -- Windows Internet Explorer

Resources

• Microsoft Technet: Internet Explorer Policy Settings