Win2008 system IE does not let others reduce IE security

IE is the system's own browser, online browsing through IE browser is a very simple operation, but in the Windows 2008 system as a server, In order to ensure the security of the system, the use of IE browser is so complicated. In order to use IE more effectively under Windows 2008, let's take a look at IE and make a small look at it.

1, do not let others reduce IE security

Many times, all kinds of illegal hackers or Trojans are embedded in the local server system through IE browser; If Internet Explorer's own security is not high, then it can't have the ability to "immunize" those Trojans or hacking programs, so that it is vulnerable to illegal attacks when surfing the Internet in the local server system using Internet Explorer. . In order to protect the security of the local server system, it is believed that the network administrator will definitely set the security of IE to reject common Trojans and hackers. After setting up the security of Internet Explorer, the network administrator certainly does not want others to change the security parameters of Internet Explorer in the local server system. It is very simple to do this. We only need Windows. The Group Policy parameters of the Server 2008 system can be set to prevent others from changing the security parameters of the Internet Explorer:

First login to the Windows Server 2008 server system with a privileged account, click the system desktop In the "Start" button, click the "Run" command from the pop-up "Start" menu to open the system run dialog box, enter the "ldped;gpedit.msc" command to enter the local server system. Group Policy Edit Window;

From the left pane of the Group Policy Edit window, find the "User Configuration" node option and use the mouse to expand the "Administrative Template" under the option. ;Windows component”/“Internet Explorer"/“Internet Control Panel> Group Policy sub-item, on the right side of the corresponding child In the pane, find the "Disable Security Pages" group policy option, and right-click the option, and execute the "Properties" command from the pop-up context menu to open the security page as shown. ”Group Policy Property Settings Window;

Check that the “Enabled” option in the property settings window is selected. If it is found that it has not been selected, we can prompt it. Re-check, then click the "OK" button, so that the "Security" tab page in the IE browser options settings window will be automatically hidden, then illegal users will naturally not be able to pass "Security" The tab page arbitrarily changes the security level of Internet Explorer.

2, to prevent others from downloading information

When surfing the Internet with Internet Explorer in the Windows Server 2008 server system environment, you often encounter some people who want to see or want to use it. Power, software, this time most people want to be able to download these resources to the local server system hard drive; but this will not only consume too much valuable server hard disk space resources, but also may bring a lot of potential security to the server system Threat. In order to make the server system run more secure, many network administrators often turn off the download function of Internet Explorer by installing professional tools. In fact, without the help of professional tools, we can also control the IE browser to perform the download function at will. It is the specific control operation steps:

First login to the Windows Server 2008 server system with a privileged account, click the “Start” button in the system desktop, from the pop-up "Start” menu list Click the “Run” command to open the system run dialog box, enter the “gpedit.msc” command to enter the group policy edit window of the local server system;

from the left side of the group policy edit window In the display pane, find the "User Configuration" node option, and use the mouse to expand the "Administrative Templates" under the option, "Windows Components", "/" "Security Features" "Security Properties”/&ldquo ; restrict file download > group policy sub-item, in the right pane of the corresponding sub-item, find “Internet Explo Rer process & rdquo; group policy option, and right-click this option, from the pop-up right-click menu to execute the "property" command, open the "Internet Explorer process" as shown in the group policy property settings window; Br>

Check that the “Enabled” option in the property settings window is selected. If it is found that it has not been selected, we can re-select it in time, then click “ & rdquo; button, so IE browser can not download files from the Internet.