Realizm

I'm looking for a way to block a Limited User account's ability to download Anything from Internet Explorer in Windows XP Home.

Preferably the way to do this would be Free... If it's possible.. could someone help me out here..


Thanks.

Realizm

I found that I can set this in the Security setting of the IE control panel, but I think this will affect every IE no matter what user, right?

I really only wnat to do this for a specific user.

The_Dude

what do u mean by downloads?

do u mean just any download or do u mean an installer for a program?

__________________
"Luck is what happens when preparation meets opportunity." - Darrel K Royal

Realizm

I mean physically clicking a link that initiates a "File Download." Not necessarily Installer, but file in general. This means not being able to Save Target as to the drive, not being able to click anything.zip and to download it.

I want the user to be able to view websites, just not download any files what so ever. Cookies and whatever goes to the cache for web pages are ok, but that's it.

Pragma

Well, you can remove write-access to all portions of the C drive except for "Documents and Settings\$USER". That'd be a way of limiting it to specifically that folder. From there, you could then impose a quota on the folder (no idea if that's possible in XP Home).

Is there a specific reason why you want to prevent the user from downloading files? If I know more, might be able to better help.

__________________
Eat antimatter, Posleen-boy!

Realizm

Basically the user isn't very computer or security saavy and I'm afraid that they willl obtain software or files that contain viruses or other malicious code.

They generally accept file sends from people before they think about what they are about to let on the computer.

I know this is difficult with XP Home, but tomato tomato...

There is of course AV software that I could impose, but I'm looking for something also very direct. It would be a great benefit to not let them download at all..

Pragma

If the machine was part of an Active Directory tree, you might be able to push down a Global Policy Object to the XP box (at least with XP Pro, but no idea about XP Home).

As for a standalone XP Home box, I think you're best off installing an AV client to it, setting up the schedule so that every day it downloads the latest dat files (Gets all of the emergency ones, etc., not just the weekly ones that way - less time unprotected).

__________________
Eat antimatter, Posleen-boy!

Realizm

So there's no easy way to keep downloads off at least?

Pragma

Nope. They're prevented from installing ActiveX controls - only Local Administrators and Power Users can do that. As for blocking all downloads, regardless of what it is, that's something that would require a very restrictive GPO.

Unless someone's got a better idea, that's about all I can come up with at the moment.

__________________
Eat antimatter, Posleen-boy!

Realizm

Still open to ideas.