Way to Block Downloads in XP Home? - Tilted Forum Project Discussion Community

Realizm · 08-03-2003, 07:18 PM

I'm looking for a way to block a Limited User account's ability to download Anything from Internet Explorer in Windows XP Home.

Preferably the way to do this would be Free... If it's possible.. could someone help me out here..

Thanks.

Realizm · 08-03-2003, 07:24 PM

I found that I can set this in the Security setting of the IE control panel, but I think this will affect every IE no matter what user, right?

I really only wnat to do this for a specific user.

The_Dude · 08-03-2003, 07:32 PM

what do u mean by downloads?

do u mean just any download or do u mean an installer for a program?

Realizm · 08-03-2003, 07:37 PM

I mean physically clicking a link that initiates a "File Download." Not necessarily Installer, but file in general. This means not being able to Save Target as to the drive, not being able to click anything.zip and to download it.

I want the user to be able to view websites, just not download any files what so ever. Cookies and whatever goes to the cache for web pages are ok, but that's it.

Pragma · 08-04-2003, 01:44 PM

Well, you can remove write-access to all portions of the C drive except for "Documents and Settings\$USER". That'd be a way of limiting it to specifically that folder. From there, you could then impose a quota on the folder (no idea if that's possible in XP Home).

Is there a specific reason why you want to prevent the user from downloading files? If I know more, might be able to better help.

Realizm · 08-04-2003, 02:01 PM

Basically the user isn't very computer or security saavy and I'm afraid that they willl obtain software or files that contain viruses or other malicious code.

They generally accept file sends from people before they think about what they are about to let on the computer.

I know this is difficult with XP Home, but tomato tomato...

There is of course AV software that I could impose, but I'm looking for something also very direct. It would be a great benefit to not let them download at all..

Pragma · 08-04-2003, 02:21 PM

If the machine was part of an Active Directory tree, you might be able to push down a Global Policy Object to the XP box (at least with XP Pro, but no idea about XP Home).

As for a standalone XP Home box, I think you're best off installing an AV client to it, setting up the schedule so that every day it downloads the latest dat files (Gets all of the emergency ones, etc., not just the weekly ones that way - less time unprotected).

Realizm · 08-04-2003, 04:46 PM

So there's no easy way to keep downloads off at least?

Pragma · 08-04-2003, 04:52 PM

Nope. They're prevented from installing ActiveX controls - only Local Administrators and Power Users can do that. As for blocking all downloads, regardless of what it is, that's something that would require a very restrictive GPO.

Unless someone's got a better idea, that's about all I can come up with at the moment.

Realizm · 08-04-2003, 06:04 PM

Still open to ideas.

08-03-2003, 07:18 PM	#1 (permalink)
Realizm Insane Location: A fuzzy cloud.	Way to Block Downloads in XP Home? I'm looking for a way to block a Limited User account's ability to download Anything from Internet Explorer in Windows XP Home. Preferably the way to do this would be Free... If it's possible.. could someone help me out here.. Thanks.

08-03-2003, 07:32 PM	#3 (permalink)
The_Dude The GrandDaddy of them all! Location: Austin, TX	what do u mean by downloads? do u mean just any download or do u mean an installer for a program? __________________ "Luck is what happens when preparation meets opportunity." - Darrel K Royal

08-04-2003, 01:44 PM	#5 (permalink)
Pragma I am Winter Born Location: Alexandria, VA	Well, you can remove write-access to all portions of the C drive except for "Documents and Settings\$USER". That'd be a way of limiting it to specifically that folder. From there, you could then impose a quota on the folder (no idea if that's possible in XP Home). Is there a specific reason why you want to prevent the user from downloading files? If I know more, might be able to better help. __________________ Eat antimatter, Posleen-boy!

08-04-2003, 02:21 PM	#7 (permalink)
Pragma I am Winter Born Location: Alexandria, VA	If the machine was part of an Active Directory tree, you might be able to push down a Global Policy Object to the XP box (at least with XP Pro, but no idea about XP Home). As for a standalone XP Home box, I think you're best off installing an AV client to it, setting up the schedule so that every day it downloads the latest dat files (Gets all of the emergency ones, etc., not just the weekly ones that way - less time unprotected). __________________ Eat antimatter, Posleen-boy!

08-04-2003, 04:52 PM	#9 (permalink)
Pragma I am Winter Born Location: Alexandria, VA	Nope. They're prevented from installing ActiveX controls - only Local Administrators and Power Users can do that. As for blocking all downloads, regardless of what it is, that's something that would require a very restrictive GPO. Unless someone's got a better idea, that's about all I can come up with at the moment. __________________ Eat antimatter, Posleen-boy!

08-03-2003, 07:24 PM	#2 (permalink)
Realizm Insane Location: A fuzzy cloud.	I found that I can set this in the Security setting of the IE control panel, but I think this will affect every IE no matter what user, right? I really only wnat to do this for a specific user.

08-03-2003, 07:37 PM	#4 (permalink)
Realizm Insane Location: A fuzzy cloud.	I mean physically clicking a link that initiates a "File Download." Not necessarily Installer, but file in general. This means not being able to Save Target as to the drive, not being able to click anything.zip and to download it. I want the user to be able to view websites, just not download any files what so ever. Cookies and whatever goes to the cache for web pages are ok, but that's it.

08-04-2003, 02:01 PM	#6 (permalink)
Realizm Insane Location: A fuzzy cloud.	Basically the user isn't very computer or security saavy and I'm afraid that they willl obtain software or files that contain viruses or other malicious code. They generally accept file sends from people before they think about what they are about to let on the computer. I know this is difficult with XP Home, but tomato tomato... There is of course AV software that I could impose, but I'm looking for something also very direct. It would be a great benefit to not let them download at all..

08-04-2003, 04:46 PM	#8 (permalink)
Realizm Insane Location: A fuzzy cloud.	So there's no easy way to keep downloads off at least?

08-04-2003, 06:04 PM	#10 (permalink)
Realizm Insane Location: A fuzzy cloud.	Still open to ideas.