[THIN] Re: Explorer and Internet Browsing - A SOLUTION
- From: Mark Cook <mc@xxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>, "'windows2000@xxxxxxxxxxxxx'" <windows2000@xxxxxxxxxxxxx>
- Date: Wed, 20 Oct 2004 22:54:07 +0100
Ok, we've got a solution to this issue now folks. A simple DLL that
interfaces with Internet Explorer and all app's that use it's controls, eg.
Explorer.exe. With this DLL you can control what addresses are not allowed
in the address bar on a per user, machine or even time/day basis. For
example simply by saying
EXPLORER.EXE,HTTP://
in the block list you can stop web browsing from Explorer. You could
specify
IEXPLORE.EXE,C:
to stop users of IE browsing the local C: drive. You could even do
EXPLORER.EXE,C:
to stop EXPLORER looking at the C: drive, even creating a desktop shortcut
to C: will not work. Will also log all or selected browsing activity so you
can keep track of what's going on !
We'll be using this internally in the very near future, so if anyone else is
interested in trying this out please mail me (off list at
mark@xxxxxxxxxxxxxx) and I'll forward you the DLL and instructions f.o.c.
Mark
-----Original Message-----
From: Mark Cook
To: 'thin@xxxxxxxxxxxxx'
Sent: 20/10/2004 17:00
Subject: [THIN] Re: Explorer and Internet Browsing
Hey Dirk,
Just cut an IE browser helper object if you'd like to give it a whirl,
see
if it will do what you need !? Create a list of blocked app's and
matching
patterns, eg.
IEXPLORE.EXE,C:\
IEXPLORE.EXE,D:\
EXPLORER.EXE,HTTP:
To block file access to C and D drives in IE and web browsing from
explorer
respectively ! It's very basic and only about 20 minutes work but if
it's
a goer then I'll do more work on it !! Mail me off list at
mark@xxxxxxxxxxxxxx and I'll forward you a test version.
Mark
-----Original Message-----
From: Mark Cook [mailto:mc@xxxxxxxxxx]
Sent: 20 October 2004 15:10
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Explorer and Internet Browsing
Sorry, should have read the whole thread first ! Will revisit it and see
if
I can come up with something fairly quickly
Mark
-----Original Message-----
From: Dirk Blose [mailto:Dirk.Blose@xxxxxxxxxx]
Sent: 20 October 2004 15:00
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Explorer and Internet Browsing
No, I don't want a kiosk mode. The situation is that I will have users
on
the system using Iexplore.exe that I will explicitly grant. However I
will
have other users on the system to whom I will have to give Windows
explorer
and I do not want those users to be able to browse via the windows
explorer
interface. In some case these users will overlap in that someone allowed
to
use IE will also have the Windows Explorer app. That means I can not do
DENY
or Proxy settings on the windows explorer users without affecting some
of
the authorized users. Again the goal is to prevent the Windows Explorer
executable from doing browsing.
Thanks for everyone's ideas and comments.
Dirk Blose, MCSE, CCA
Lead Technical Analyst
(919) 765-4791
dirk.blose@xxxxxxxxxx
>>> mc@xxxxxxxxxx 10/20/04 09:51AM >>>
Sorry, just to chip in here - it actually uses an activeX control,
basically
the same one IE uses hence it works the same ! You can reuse this
programmatically which is why MS did it that way.
Was you're original goal to produce a kiosk mode browser to access a
limited
number of sites ? If so, what else is required other than the address
bar,
back and forward buttons etc... Maybe I could run you up a little EXE
to do
exactly what you need with the IE activeX control...
Mark
-----Original Message-----
From: Joshua Owen [mailto:joshua.owen@xxxxxxxxxxxxxxxx]
Sent: 20 October 2004 14:47
To: Dirk.Blose@xxxxxxxxxx; thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Explorer and Internet Browsing
You're right, for some reason I thought it fired up the the iexplore
process in the background once a web url had been entered into the
address bar!
>>> Dirk.Blose@xxxxxxxxxx 20/10/04 1:14:53 pm >>>
When a user browses from windows explorer it does not use IEXPLORE.EXE
so disabling it does not work.
Dirk Blose, MCSE, CCA
Lead Technical Analyst
(919) 765-4791
dirk.blose@xxxxxxxxxx
>>> joshua.owen@xxxxxxxxxxxxxxxx 10/20/04 08:02AM >>>
How about disabling permisions for you user to iexplore.exe?
>>> Malcolm.BRUTON@xxxxxxxx 20/10/04 9:54:32 am >>>
Appsense server based tool kit can do this....Has a trail download on
their
web site.
Expensive product for that one little piece.
It stops users typing things such as "c:\" could be blocked. This is
in any
app. It could allow or disallow "www." To be typed in explorer tool
bar...Also ideal if user can get to the run command.
Is there a reg edit to hide the way to hide the address bar instead?
Malcolm
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf
Of Matthew Shrewsbury
Sent: 19 October 2004 19:37
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Explorer and Internet Browsing
That might be it...
Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA
Network Administrator
-----Original Message-----
From: Sweeney, Deb [mailto:DSweeney@xxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, October 19, 2004 2:31 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Explorer and Internet Browsing
Can't this be accomplished by disabling the run command?
-----Original Message-----
From: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx]
Sent: Tuesday, October 19, 2004 1:17 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Explorer and Internet Browsing
Use your hosts file to place an IP address that you chose instead of
the
correct IP. For example games.zone.com you could place in the host
file
to 127.0.0.1 or if you want to get fancy redirect to your own web
server
and have a page on your server that says "Access denied".
If you want to allow them to all websites but now allow them to the
local drive letters you can block this with a policy. I have forgotten
what policy I have that blocks this but when I place a UNC path in the
address bar I get a message "Access to the resource M:\ has been
disallowed". I am running the IEAK policies.
Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA
Network Administrator
-----Original Message-----
From: Dirk Blose [mailto:Dirk.Blose@xxxxxxxxxx]
Sent: Tuesday, October 19, 2004 2:03 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Explorer and Internet Browsing
I will be publishing specific Web sites via Kiosk Mode but I don't
want
users to be able to browse from the Windows Explorer. I was hoping
there
was some DLL required or something that I could block individually.
Dirk Blose, MCSE, CCA
Lead Technical Analyst
(919) 765-4791
dirk.blose@xxxxxxxxxx
>>> gareese@xxxxxxxxx 10/19/04 01:56PM >>>
you could force in a non-existent proxy server address in the
settings.
Greg
On Tue, 19 Oct 2004 13:30:51 -0400, Dirk Blose <dirk.blose@xxxxxxxxxx>
wrote:
>
> I don't want it to remove the Menu bar or address bar, just stop it
from allowing them to go from Files stuff to web browsing.
>
> Dirk Blose, MCSE, CCA
> Lead Technical Analyst
> (919) 765-4791
> dirk.blose@xxxxxxxxxx
>
> >>> CMSchneider@xxxxxxxxx 10/19/04 01:24PM >>>
>
>
> Kiosk mode.
>
> "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -k [path]
>
> -----Original Message-----
> From: Dirk Blose [mailto:Dirk.Blose@xxxxxxxxxx]
> Sent: Tuesday, October 19, 2004 12:17 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Explorer and Internet Browsing
>
> Here's a question for anyone. We publish Windows Explorer pointing
to
the
> User's Network Home drive H:. This works quite well but something
occurred
> to me that I need help with. Once Explorer is open any User can
enter
a URL
> in the address bar and they can browse via the Explorer Window. Does
any
> know of a way to block this behavior?
>
> Dirk Blose, MCSE, CCA
> Lead Technical Analyst
> (919) 765-4791
> dirk.blose@xxxxxxxxxx
>
> ********************************************************
> This Weeks Sponsor RTO Software
> Do you know which applications are abusing your CPU and memory?
> Would you like to learn? -- Free for a limited time!
> Get the RTO Performance Analyzer to quickly learn the applications,
users,
> and time of day possible problems exist.
> http://www.rtosoft.com/enter.asp?id20
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation
mode
use
> the below link:
> http://thin.net/citrixlist.cfm
>
> ********************************************************
> This Weeks Sponsor RTO Software
> Do you know which applications are abusing your CPU and memory?
> Would you like to learn? -- Free for a limited time!
> Get the RTO Performance Analyzer to quickly learn the applications,
users,
> and time of day possible problems exist.
> http://www.rtosoft.com/enter.asp?id=320
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
> ********************************************************
> This Weeks Sponsor RTO Software
> Do you know which applications are abusing your CPU and memory?
> Would you like to learn? -- Free for a limited time!
> Get the RTO Performance Analyzer to quickly learn the applications,
users,
> and time of day possible problems exist.
> http://www.rtosoft.com/enter.asp?id20
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
************************************************************************
****
*******
The Royal Bank of Scotland plc. Registered in Scotland No 90312.
Registered Office: 36 St Andrew Square, Edinburgh EH2 2YB.
Authorised and regulated by the Financial Services Authority
This e-mail message is confidential and for use by the
addressee only. If the message is received by anyone other
than the addressee, please return the message to the sender
by replying to it and then delete the message from your
computer. Internet e-mails are not necessarily secure. The
Royal Bank of Scotland plc does not accept responsibility for
changes made to this message after it was sent.
Whilst all reasonable care has been taken to avoid the
transmission of viruses, it is the responsibility of the recipient to
ensure that the onward transmission, opening or use of this
message and any attachments will not adversely affect its
systems or data. No responsibility is accepted by The Royal
Bank of Scotland plc in this regard and the recipient should carry
out such virus and other checks as it considers appropriate.
Visit our websites at:
http://www.rbs.co.uk/CBFM
http://www.rbsmarkets.com
************************************************************************
****
****
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications,
users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor RTO Software
Do you know which applications are abusing your CPU and memory?
Would you like to learn? -- Free for a limited time!
Get the RTO Performance Analyzer to quickly learn the applications, users,
and time of day possible problems exist.
http://www.rtosoft.com/enter.asp?id=320
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
- » [THIN] Re: Explorer and Internet Browsing - A SOLUTION
