I'm attempting to set up a GPO to restrict which browser plugins can run in IE. This new GPO is part of XP SP2 is found in: User Config/Windows Components/Internet Explorer/Security Features/Add-on Management
The things I'm trying to stop is the addition of spyware toolbars and other junk that gets mysteriously installed into IE. Also, some of the more privileged users have a tendency to install things like the Yahoo toolbar, which also messes with IE and some of our internal web apps. (don't ask, I can't reduce their privileges) So far I've found class ID strings for common components like Adobe Reader, Microsoft Common Dialog (which we use internally), and a few others... I'd also like to enable thinks like Flash and shockwave but am having a little more trouble locating those CLSID's. I was also hoping for a listing of activex components others have found useful (or harmful). I've googled, and get lots of results, but nothing really matches what I'm looking for. So, the question is: Does someone out there have a listing of the class ID strings for common web component ActiveX plugins? OR am I wasting energy on a security measure that's going to cause more headaches than the problems is solves? Thanks for any insights. Joe Pochedley A computer terminal is not some clunky old television with a typewriter in front of it. It is an interface where the mind and body can connect with the universe and move bits of it about. -Douglas Adams List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
