Limit types of files you can download in IE6

[Andrew111]

I know this is possible somehow....but Google has let me down or my searching skills need to be improved I manage a small network of about 25 computers and we previously ran into problems with users downloading .exe files and getting viruses on the computers. I used the Internet Explorer Administration Kit to block all downloads.......but they need to be able to access online Microsoft Office files and Adobe Acrobat as well......right now they can't download anything. Is there a way to limit the file types you are allowed to download in IE6?

 

[Andrew111]

Anybody?

 

[mechBgon]

If the systems are Windows XP Professional, then try a Software Restriction Policy, either on the local machines or in a Group Policy. screen-capture movie of how to do it

This doesn't prevent downloading, but does prevent execution of stuff in anyplace not explicitly permitted. If they are Limited / Restricted-User class users, which I hope they are, then this ought to help. If they aren't Limited or Restricted-User class, then start with that if at all possible.

Also, if you happen to have McAfee for your security vendor, and are using VirusScan Enterprise 8.0i, I could suggest some additional tricks using Access Protection rules. And you should make sure your antivirus software is updating daily or more often these days.

Lastly, if you detect a pattern, such as they keep trying to install a program from the same website, then you might want to block that website at the router.