Internet Explorer Administration Kit Restrictions Are Not Applied to Users (314237)
The information in this article applies to:
- Microsoft Internet Explorer Administration Kit version 6
This article was previously published under Q314237 SYMPTOMS
You can use the Internet Explorer Administration Kit (IEAK) to create a build of Microsoft Internet Explorer that sets a user restriction. For example, you may want to restrict access to the Connections tab when a user clicks Internet Options on the Tools menu. The Internet Explorer package may be installed successfully for the administrator who initiates the installation, but the restriction is not in effect for subsequent users and new users.
CAUSE
This behavior occurs because no user has permission to modify any of the values under the Policies key in the registry. Attempts to use this type of branding on a per-user basis under the individual user security context do not work.
This behavior is caused not by the IEAK, but in the registry, where the following key is locked down:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
The IEAK attempts to set this registry entry correctly, but cannot because the user does not have the correct permissions.
WORKAROUND
Policies are locked down by the time that the .ins file is processed. The only way to change settings without unlocking the Policies key is by using Group Policy objects (GPOs).
STATUSThis behavior is by design.
| Modification Type: | Major | Last Reviewed: | 1/28/2002 |
|---|
| Keywords: | kbenv kbprb KB314237 |
|---|
|