Duplicate on Server Fault:
Cannot seem to disable ability to view temporary internet files via group policy
Windows XP Pro SP3, IE8 (8.0.6001.18702), within local gpedit.msc I did the below:
- User Config/Admin Temp/Windows Comp/IE
- enabled: disable changing temporary internet file settings
- User Config/Admin Temp/Windows Comp/IE/Delete Browsing History
- enabled all (11 items)
However there is a loophole that lets me still wipe history & other files via: Tools, Internet Options, Browsing History, Settings, View Objects, delete everything, hit up arrow, go to History (hidden folders has to be on), delete everything
Only way around this I can see is one of the below:
- disable General Internet Options Page via group policy
- setup NTFS folder restrictions on that temp internet files (worried about adverse affects like not being able to store them)
- further grind-down group policy somewhere else to prevent deleting files
Just find it odd group policy wouldn't have a settings to simply disable the Browser History Settings button (as it further shows the location which a user could just go to).
Ideal solution/answer: someone to confirm this is/is-not available in group policy & their suggested action
%systemdir%\Documents and Settings\%username%\Local Settings\History\history.ie5
- Either you deny access, and history isn't recorded, or you allow access, and they can clear their history. If you are trying to enforce policies that users will knowingly subvert if they get the chance, then ease of use doesn't really factor into it. You need to log the information from a secure location if you need it to be reliable.