(Windows 2008 Server: Lesson 9)

{ Configuring Internet Explorer Group Policy }

• Why should we configure group policies for Internet Explorer? 
  • As a security focal, you want to ensure that you have the ability to view a user's browsing history.
  • Browsing history might contain forensic evidence for any possible attack that might occur in the future.
  • In addition, by disabling the possibility of allowing a user to delete their own history, this option could serve as a deterrent to surfing prohibited material.

   

1. Start your Windows 2008 Server
   • Instructions: 
     1. Click on W2K8 Server
     2. Click on Play virtual machine
   • 

    

2. CRTL + ALT + DELETE
   • Instructions
     1. Virtual Machine
     2. Send Ctrl+Alt+Del
   • 

    

3. Login as Administrator
   • Click on the Administrator icon.
   • 

    

4. Login
   • Command: Provide the password for the Administrator account.
   • 

    

1. Launch Group Policy Editor
   • Instructions:
     1. In the search box, type "gpedit.msc"
     2. Click on gpedit
   • 

    

2. Navigate to the Internet Explorer Policies
   • Instructions:
     1. Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer
   • 

1. Select "Prevent the deletion of temporary Internet files and cookies"
   • Instructions:
     1. Right click on "Prevent the deletion of temporary Internet files and cookies"
     2. Select Properties
   • Note:
     • If you enable this policy setting, users will not be able to delete temporary Internet files and cookies.
   • 

    

2. Edit "Prevent the deletion of temporary Internet files and cookies"
   • Instructions:
     1. Click on Enabled
     2. Click on Apply
     3. Click on OK
   • 

    

3. View your results
   • Instructions:
     1. Select the Standard tab at the bottom of the right window.
     2. Notice that the state of "Prevent the deletion of temporary Internet files and cookies" is now Enabled.
   • 

1. Select "Turn off Delete Browsing History functionality"
   • Instructions:
     1. Right Click on "Turn off Delete Browsing History functionality"
     2. Select Properties
   • Note:
     • If you enable this policy setting, users cannot perform the "Delete Browsing History" action in Internet Options for Internet Explorer 7.
   • 

    

2. Configure "Turn off Delete Browsing History functionality"
   • Instructions:
     1. Select Enabled
     2. Click on Apply
     3. Click on OK.
   • 

1. Select Disable "Configuration History"
   • Instructions:
     1. Right Click on Disable "Configuration History"
   • Note:
     • If you enable this policy setting, a user cannot set the number of days that Internet Explorer keeps track of the pages viewed in the History List.
     • You must specify the number of days that Internet Explorer keeps track of the pages viewed in the History List.
     • Users will not be able to delete browsing history.
   • 

    

2. Configure Disable "Configuration History"
   • Instructions:
     1. Select Enabled
     2. Type 90 in the Days to keep pages in History text box.
     3. Select Apply
     4. Select OK.
   • 

1. Open the Command Prompt
   • Instructions:
     1. Start --> Command Prompt
   • 

    

2. Update the Group Policies
   • Instructions:
     1. gpupdate /force
   • 

1. Verify results in Internet Explorer
   • Instructions:
     1. In the search box, type "explorer"
     2. Click on Internet Explorer
   • 

    

2. Open Internet Options
   • Instructions:
     1. Tools --> Internet Options
   • 

    

3. Review Internet Options
   • Instructions:
     1. Notice the Delete button is not in focus, as in it is not clickable.
     2. Click on the Settings button.
   • 

    

4. Review Temporary Internet Files and History Settings
   • Notes:
     1. Notice that "Days to keep pages in history:" cannot be changed.
     2. Also, the "Days to keep pages in history:" has been set to 90 days.
   • 

1. Open a Command Prompt
   • Instructions:
     1. Start --> Command Prompt
   • 

    

2. View Group Policy Results
   • Instructions:
     1. gpresult /V | more
     2. Before pressing the <Enter> key more than one continue to the next step.
   • 

    

3. Using the gpresult utility
• Instruction:
  1. Keep pressing the <Enter> key until you see "User Rights"
  2. Once you see "User Rights" press the <Ctrl>+c keys
  3. date
  4. Press Enter
  5. echo "Your Name"
     • Replace the string "Your Name" with your actual name.
     • E.g., echo "John Gray"
• Proof of Lab Instruction:
  1. Do a PrtScn
  2. Paste into a word document
  3. Upload to Moodle.
•