Removing Delete History option from IE 7

Have a paranoid owner, who wants to personally go and visit each machine and see the browsing history. Is there a switch or registry hack that keeps a user from deleting their browsing history?

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

RobertKaucher

There is a GPO: User Config/Admin Templates/IE Explorer
You need to enable "Disable Changing Temporary Internet Files And Settings", "Turn Off Delete Browsing History Functionality", and "Disable Configuring History" policies.

Good luck with that client. I'm sure you will get lots of business from him....
I would try to convince him to use a proxy server. Set up a Linux box and use something like Squid. Then he can probably use a browser to view internet usage history.

mikedisd2

Bokeh wrote: »

Have a paranoid owner, who wants to personally go and visit each machine and see the browsing history.

Sounds like a great guy to work for. Does he also time toilet breaks?

Plantwiz

RobertKaucher wrote: »

There is a GPO: User Config/Admin Templates/IE Explorer
You need to enable "Disable Changing Temporary Internet Files And Settings", "Turn Off Delete Browsing History Functionality", and "Disable Configuring History" policies.

Good luck with that client. I'm sure you will get lots of business from him....
I would try to convince him to use a proxy server. Set up a Linux box and use something like Squid. Then he can probably use a browser to view internet usage history.

How about also including prohibit from installing other browsers. Otherwise, the user could simply install a different browser...or even use a liveCD to get out, couldn't they?

Too bad. I agree with the Firewall option though...that will be the slickest way to monitor it...if he seems to think that is a priority.

RobertKaucher

Yes, all those are possibilities. But in my experience this type of boss tends to be cheap and their favorite security measure is to rely on the ignorance of their users.

seuss_ssues

Ive never used the GP setting to not allow a user to clear their history. Can't they still manual go and clear out the contents of the folder? I guess the index would still be there though.

dynamik

Even if he was cheap, it costs next to nothing to get an old P4 2.4 running with Untangle. That's like $100; that's easily less than one day's worth of time running around from machine to machine.

seuss_ssues

Just script it .... might be slow though, so do it over the weekend.

dynamik wrote: »

Even if he was cheap, it costs next to nothing to get an old P4 2.4 running with Untangle. That's like $100; that's easily less than one day's worth of time running around from machine to machine.

Plantwiz

dynamik wrote: »

Even if he was cheap, it costs next to nothing to get an old P4 2.4 running with Untangle. That's like $100; that's easily less than one day's worth of time running around from machine to machine.

Or even try:

ClarkConnect - Server and Gateway - Linux Small Business Server SBS