PDA

View Full Version : Enhanced Security Configuration for Internet Explorer


davidh
August 9th, 2006, 03:33 PM
Enhanced Security Configuration for Internet Explorer
http://msdn.microsoft.com/workshop/security/szone/overview/esc_changes.asp

Judy G. Russell
August 9th, 2006, 09:37 PM
Aren't these just for MS server?

davidh
August 10th, 2006, 01:06 AM
Aren't these just for MS server?

The web page is addressed more to admins, but the settings discussed are in MS IE. I went thru my IE config and changed it to match the suggested "best practice". I suspect that MS doesn't really expect home users to reconfigure IE. Even tho' I rarely use IE, I had a little extra motivation now to add some security to IE because of the unpatchable vulnerabilities in IE under Win 98/ME now.

I am sure that there are admin tools to do it automatically, esp. for large offices, etc. There is also a tool for home users that will set the "best practice" configuration in the registry automatically, but I forget the name. I've been working on computers for about 35 years and get sort of tired of tweaking sometimes. Not sure that I'd still enjoy writing drivers in assembler code any more.

DH

Judy G. Russell
August 10th, 2006, 08:35 PM
I've been working on computers for about 35 years and get sort of tired of tweaking sometimes.Now that, as my SIL would say, is a True Fact.

davidh
August 13th, 2006, 02:54 PM
Enhanced Security Configuration for Internet Explorer
http://msdn.microsoft.com/workshop/security/szone/overview/esc_changes.asp

These configuration settings apparently disable javascript in the MS IE "Internet Zone". This would probably be unacceptable to many who are regular users of MS IE. To use these settings "as is" one must add many sites to the "trusted zone", I think. Since I don't use MS IE much I have not bothered to try to edit the settings to fix this.

DH