URL Lock - User contributions [en]

Download

2015-06-04T01:32:53Z

Stevenlawrance:

*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock-1.3.0.0.msi Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock64-1.3.0.1.msi Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
*[https://www.moonlightdesign.org/urllock/download/ Windows Installer (MSI) files for older versions of IE URL Lock] (WebDAV-enabled for convenience)
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock.adm Windows XP and Windows Server 2003]
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock-2000.adm Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an [https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock.admx ADMX file] gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [https://www.moonlightdesign.org/urllock/svn/trunk/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[https://www.moonlightdesign.org/urllock/svn/ Source code] (Subversion)
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[http://mingw-w64.yaxm.org/doku.php MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Configuration

2015-06-04T01:29:45Z

Stevenlawrance:

This page documents the meaning of each configuration value in URL Lock.

==General Information==
*By default, the IE URL Lock will prevent navigation to all http: and https: web sites, excluding WebDAV folder views. If that is your desired behavior, then no configuration is necessary. Typically, however, at least one or two sites may need to get added to the permitted location regular expression list.
*IE URL Lock automatically detects configuration changes in the registry. As a result, restarting Internet Explorer is not necessary to apply a change.
*At this time, only the [[Group policy editor|Microsoft Group Policy Editor]] is supported. A new configuration user interface will be released on or before July 2007.

==Enable User-Specific Configurations==
*When enabled, which is the default when it is not specified, IEURLLock will apply a user's IEURLLock registry settings after applying the local machine's IEURLLock registry settings to the running configuration
*When disabled, users' IEURLLock registry settings are ignored by IEURLLock, permitting IEURLLock to use only the local machine's IEURLLock configuration

==Debugging==
*When enabled, IEURLLock writes its activities and internal states to a console window that appears when IEURLLock is active
*When this setting is enabled, it controls how verbose IEURLLock will be when it writes messages to the console window
*Each debugging level includes all messages in that debugging level as well as all messages from the debugging levels that are less than the selected debugging level
*When Debugging is disabled, which is the default when it is not configured or when the debugging level is zero, IEURLLock does not create a console window
*If you are simply trying to see the results of regular expression comparisons, set the debugging level to 1 or higher for matches or 2 or higher for non-matches

==Debugging Level==
The following lists the possible values for debugging levels:
*'''0''' No debugging
*'''1''' Errors
*'''2''' Warnings
*'''3''' Important Information
*'''4''' All Information
*'''5''' Minutiae

==Access Denial Location==
*URL, UNC, or File Path
*By default, IEURLLock redirects denied locations to res://webhost.exe/nonavigate.htm. If you want to use a custom access denial location, then specify the URL, UNC, or file path to that location in this setting. This location will not get blocked by IEURLLock
*Note that this path should ideally not redirect to another location unless if that location is permitted via the Permitted Location Regular Expression List
*'''Important:''' If you want to set this to the root path on a web server, then you MUST include the trailing slash or else an access denial will result in an infinite redirect loop if the location with the trailing slash is not in the Permitted Location Regular Expression List (that is, use "http://www.microsoft.com/" instead of "http://www.microsoft.com", as an example)
*A blank path is equivalent to the default access denial location
*If the access denial location specified does not exist, the user will get redirected to Internet Explorer's default access denial page. If this happens when the "Restrict Only Web Locations" setting is explicitly disabled and Internet Explorer's default access denial page is not in the Permitted Location Regular Expression List, the browser window may give up or, if the browser window was being created with the new location, the browser window may not appear at all

==Enable IEURLLock==
*When enabled, which is the default setting when not configured, IEURLLock blocks locations that are not explicitly allowed in the Permitted Location Regular Expression List
*When disabled, IEURLLock does not block any locations

==Restrict Only Web Locations==
*When enabled, which is the default when this is not configured, IEURLLock only blocks locations that begin with http: or https:. As an exception, WebDAV locations are not blocked when opened as a web folder. Once IEURLLock encounters a navigation to a folder-based view, it delays its blocking decision on each navigation until that navigation's view gets created to ensure the proper operation of the Back button to a folder-based view, which causes the browser to contact remote web servers and begin to download the navigated site before being blocked. Fortunately, the blocking decision takes place before scripts are run, so this behavior should be safe, but is not as safe as blocking the location before contacting the remote server
*IEURLLock will make its blocking decisions before the browser contacts the remote web server on browser windows that have not shown a folder-based view yet. As an exception, however, if a permitted site redirects to a denied site, then the blocking decision takes place after the web server serving the blocked location gets contacted but before any scripts are run
*When this setting is disabled, IEURLLock will restrict ALL locations, not just http: and https:. This means that locations such as "Control Panel", C:\, \\server\sharename, res:, and the rest will get blocked unless if they are permitted through the Permitted Location Regular Expression List. No special considerations for folder-based views to accommodate WebDAV are enabled when this setting is Disabled, meaning that all blocking decisions except for the special redirection case mentioned in the previous paragraph happen once the location is known and before any remote servers are contacted. This option grants IT administrators the greatest level of control and security, though one should note that this does not affect the Explorer view within the Common File Open and Save As dialog boxes, which do not load Browser Helper Objects, so there are still some ways around this, though Explorer itself can be locked down."

==Permitted Location Regular Expression List==
*Locations that the user navigates to will get checked against the [[Regular expressions|regular expressions]] in this list, permitting the navigation as soon as it finds a regular expression that matches the location. If none of the regular expressions match, IEURLLock blocks access to that location
*IEURLLock uses Perl-Compatible Regular Expressions through the PCRE library. More information on this library and how to construct regular expressions exists at http://www.pcre.org/ and http://gnuwin32.sourceforge.net/packages/pcre.htm
*Put descriptive names for each regular expression into the Value Name field and put each corresponding regular expression into the Value field
*If any regular expression compilation errors arise when IEURLLock loads its configuration, IEURLLock will display the descriptive name from the Value Name field in the error message. Other than that, IEURLLock does not care what you put into the Value Name field
*If your policy editor does not let you edit the regular expressions that you previously added, then, if you want to, open the Registry Editor and browse to HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER and open up Software\Policies\Steven Lawrance\IEURLLock\AllowList to edit previously-added items. Note that this only works on the local machine. When editing policies in an ActiveDirectory, this workaround will not work
*Example:
Value Name: Microsoft
Value: ^http://(www\.)?microsoft\.com(/|$)
*Case-Insensitive Example:
Value Name: Force.com Sites
Value: (?i)^http(s)://([-a-zA-Z0-9])+\.(secure\.)?force\.com(/|$)

Licenses

2015-06-04T01:27:14Z

Stevenlawrance:

The URL Lock is distributed under the terms of the [https://www.moonlightdesign.org/urllock/svn/trunk/LICENSE.txt GNU Lesser Public License (LGPL) 2.1].

This software contains the Perl-compatible regular expression (PCRE) library, which is distributed under the terms of the [https://www.moonlightdesign.org/urllock/svn/trunk/PCRE-LICENSE.txt PCRE license].

Download

2015-06-04T01:26:32Z

Stevenlawrance:

*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock-1.3.0.0.msi Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock64-1.3.0.1.msi Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
*[https://www.moonlightdesign.org/urllock/download/ Windows Installer (MSI) files for older versions of IE URL Lock] (WebDAV-enabled for convenience)
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock.adm Windows XP and Windows Server 2003]
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock-2000.adm Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [https://www.moonlightdesign.org/urllock/svn/trunk/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[https://www.moonlightdesign.org/urllock/svn/ Source code] (Subversion)
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[http://mingw-w64.yaxm.org/doku.php MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2015-06-04T01:24:11Z

Stevenlawrance:

*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock-1.3.0.0.msi Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock64-1.3.0.1.msi Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
*[https://www.moonlightdesign.org/urllock/download/ Windows Installer (MSI) files for older versions of IE URL Lock] (WebDAV-enabled for convenience)
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock.adm Windows XP and Windows Server 2003]
**[https://www.moonlightdesign.org/urllock/svn/trunk/IEURLLock-2000.adm Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://ieurllock.cvs.sourceforge.net/*checkout*/ieurllock/IEURLLock/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[https://www.moonlightdesign.org/urllock/svn/ Source code] (Subversion)
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[http://mingw-w64.yaxm.org/doku.php MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Main Page

2015-06-04T01:16:18Z

Stevenlawrance:

[[Image:Securitywarning.png|right|Security warning screenshot]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urlllock-questions-inbox@moonlightdesign.org. I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Download

2015-06-04T00:59:34Z

Stevenlawrance:

*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock-1.3.0.0.msi Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://www.moonlightdesign.org/urllock/download/1.3.0.0/IEURLLock64-1.3.0.1.msi Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
*[https://www.moonlightdesign.org/urllock/download/ Windows Installer (MSI) files for older versions of IE URL Lock] (WebDAV-enabled for convenience)
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://ieurllock.cvs.sourceforge.net/*checkout*/ieurllock/IEURLLock/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Compatibility

2015-01-18T22:38:05Z

Stevenlawrance: /* IE URL Lock is known to work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**Microsoft Windows 8.1 64-bit with Microsoft Internet Explorer 10 or 11 in Desktop Mode
***The desktop mode of IE works with IE URL Lock, but the Metro UI version of Internet Explorer 10 and 11 don't appear to use IE URL Lock
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9, 10, and 11
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work
*Microsoft Internet Explorer 10 in the Metro UI Mode in Microsoft Windows 8
**The desktop mode works properly with IE URL Lock, but not the Metro UI mode
**I may look into fixing this at some point in 2013. Please let me know if you have any pointers or want to help out with this. Thanks!
**[https://www.moonlightdesign.org/bugs/show_bug.cgi?id=17 Bug 17] has been filed to track this
**As a workaround, set a different browser as your default browser. Internet Explorer 10's Metro UI will no longer be available [http://www.askvg.com/fix-internet-explorer-tile-missing-from-windows-8-start-screen-or-metro-ie-doesnt-start/ as long as Internet Explorer is not the default web browser].

Compatibility

2015-01-18T22:33:42Z

Stevenlawrance: /* IE URL Lock is known to work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**Microsoft Windows 8 64-bit with Microsoft Internet Explorer 10 in Desktop Mode
***I verified its functionality using the demo version of Windows 8
***The desktop mode of IE works with IE URL Lock, but the Metro UI version of Internet Explorer 10 does not appear to use IE URL Lock
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9, 10, and 11
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work
*Microsoft Internet Explorer 10 in the Metro UI Mode in Microsoft Windows 8
**The desktop mode works properly with IE URL Lock, but not the Metro UI mode
**I may look into fixing this at some point in 2013. Please let me know if you have any pointers or want to help out with this. Thanks!
**[https://www.moonlightdesign.org/bugs/show_bug.cgi?id=17 Bug 17] has been filed to track this
**As a workaround, set a different browser as your default browser. Internet Explorer 10's Metro UI will no longer be available [http://www.askvg.com/fix-internet-explorer-tile-missing-from-windows-8-start-screen-or-metro-ie-doesnt-start/ as long as Internet Explorer is not the default web browser].

Main Page

2014-10-07T01:58:43Z

Stevenlawrance:

[[Image:Securitywarning.png|right|Security warning screenshot]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urlllock-questions-inbox@moonlightdesign.org. I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Configuration

2013-08-25T04:34:48Z

Stevenlawrance: Protected "Configuration" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

This page documents the meaning of each configuration value in URL Lock.

==General Information==
*By default, the IE URL Lock will prevent navigation to all http: and https: web sites, excluding WebDAV folder views. If that is your desired behavior, then no configuration is necessary. Typically, however, at least one or two sites may need to get added to the permitted location regular expression list.
*IE URL Lock automatically detects configuration changes in the registry. As a result, restarting Internet Explorer is not necessary to apply a change.
*At this time, only the [[Group policy editor|Microsoft Group Policy Editor]] is supported. A new configuration user interface will be released on or before July 2007.

==Enable User-Specific Configurations==
*When enabled, which is the default when it is not specified, IEURLLock will apply a user's IEURLLock registry settings after applying the local machine's IEURLLock registry settings to the running configuration
*When disabled, users' IEURLLock registry settings are ignored by IEURLLock, permitting IEURLLock to use only the local machine's IEURLLock configuration

==Debugging==
*When enabled, IEURLLock writes its activities and internal states to a console window that appears when IEURLLock is active
*When this setting is enabled, it controls how verbose IEURLLock will be when it writes messages to the console window
*Each debugging level includes all messages in that debugging level as well as all messages from the debugging levels that are less than the selected debugging level
*When Debugging is disabled, which is the default when it is not configured or when the debugging level is zero, IEURLLock does not create a console window
*If you are simply trying to see the results of regular expression comparisons, set the debugging level to 1 or higher for matches or 2 or higher for non-matches

==Debugging Level==
The following lists the possible values for debugging levels:
*'''0''' No debugging
*'''1''' Errors
*'''2''' Warnings
*'''3''' Important Information
*'''4''' All Information
*'''5''' Minutiae

==Access Denial Location==
*URL, UNC, or File Path
*By default, IEURLLock redirects denied locations to res://webhost.exe/nonavigate.htm. If you want to use a custom access denial location, then specify the URL, UNC, or file path to that location in this setting. This location will not get blocked by IEURLLock
*Note that this path should ideally not redirect to another location unless if that location is permitted via the Permitted Location Regular Expression List
*'''Important:''' If you want to set this to the root path on a web server, then you MUST include the trailing slash or else an access denial will result in an infinite redirect loop if the location with the trailing slash is not in the Permitted Location Regular Expression List (that is, use "http://www.microsoft.com/" instead of "http://www.microsoft.com", as an example)
*A blank path is equivalent to the default access denial location
*If the access denial location specified does not exist, the user will get redirected to Internet Explorer's default access denial page. If this happens when the "Restrict Only Web Locations" setting is explicitly disabled and Internet Explorer's default access denial page is not in the Permitted Location Regular Expression List, the browser window may give up or, if the browser window was being created with the new location, the browser window may not appear at all

==Enable IEURLLock==
*When enabled, which is the default setting when not configured, IEURLLock blocks locations that are not explicitly allowed in the Permitted Location Regular Expression List
*When disabled, IEURLLock does not block any locations

==Restrict Only Web Locations==
*When enabled, which is the default when this is not configured, IEURLLock only blocks locations that begin with http: or https:. As an exception, WebDAV locations are not blocked when opened as a web folder. Once IEURLLock encounters a navigation to a folder-based view, it delays its blocking decision on each navigation until that navigation's view gets created to ensure the proper operation of the Back button to a folder-based view, which causes the browser to contact remote web servers and begin to download the navigated site before being blocked. Fortunately, the blocking decision takes place before scripts are run, so this behavior should be safe, but is not as safe as blocking the location before contacting the remote server
*IEURLLock will make its blocking decisions before the browser contacts the remote web server on browser windows that have not shown a folder-based view yet. As an exception, however, if a permitted site redirects to a denied site, then the blocking decision takes place after the web server serving the blocked location gets contacted but before any scripts are run
*When this setting is disabled, IEURLLock will restrict ALL locations, not just http: and https:. This means that locations such as "Control Panel", C:\, \\server\sharename, res:, and the rest will get blocked unless if they are permitted through the Permitted Location Regular Expression List. No special considerations for folder-based views to accommodate WebDAV are enabled when this setting is Disabled, meaning that all blocking decisions except for the special redirection case mentioned in the previous paragraph happen once the location is known and before any remote servers are contacted. This option grants IT administrators the greatest level of control and security, though one should note that this does not affect the Explorer view within the Common File Open and Save As dialog boxes, which do not load Browser Helper Objects, so there are still some ways around this, though Explorer itself can be locked down."

==Permitted Location Regular Expression List==
*Locations that the user navigates to will get checked against the [[Regular expressions|regular expressions]] in this list, permitting the navigation as soon as it finds a regular expression that matches the location. If none of the regular expressions match, IEURLLock blocks access to that location
*IEURLLock uses Perl-Compatible Regular Expressions through the PCRE library. More information on this library and how to construct regular expressions exists at http://www.pcre.org/ and http://gnuwin32.sourceforge.net/packages/pcre.htm
*Put descriptive names for each regular expression into the Value Name field and put each corresponding regular expression into the Value field
*If any regular expression compilation errors arise when IEURLLock loads its configuration, IEURLLock will display the descriptive name from the Value Name field in the error message. Other than that, IEURLLock does not care what you put into the Value Name field
*If your policy editor does not let you edit the regular expressions that you previously added, then, if you want to, open the Registry Editor and browse to HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER and open up Software\Policies\Steven Lawrance\IEURLLock\AllowList to edit previously-added items. Note that this only works on the local machine. When editing policies in an ActiveDirectory, this workaround will not work
*Example:
Value Name: Microsoft
Value: ^http://(www\.)?microsoft\.com(/|$)
*Case-Insensitive Example:
Value Name: Sourceforge.net Project Web Sites
Value: (?i)^http://([-a-zA-Z0-9])+\.(sf|sourceforge)\.net(/|$)

Compatibility

2012-11-25T00:04:28Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**Microsoft Windows 8 64-bit with Microsoft Internet Explorer 10 in Desktop Mode
***I verified its functionality using the demo version of Windows 8
***The desktop mode of IE works with IE URL Lock, but the Metro UI version of Internet Explorer 10 does not appear to use IE URL Lock
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work
*Microsoft Internet Explorer 10 in the Metro UI Mode in Microsoft Windows 8
**The desktop mode works properly with IE URL Lock, but not the Metro UI mode
**I may look into fixing this at some point in 2013. Please let me know if you have any pointers or want to help out with this. Thanks!
**[https://www.moonlightdesign.org/bugs/show_bug.cgi?id=17 Bug 17] has been filed to track this
**As a workaround, set a different browser as your default browser. Internet Explorer 10's Metro UI will no longer be available [http://www.askvg.com/fix-internet-explorer-tile-missing-from-windows-8-start-screen-or-metro-ie-doesnt-start/ as long as Internet Explorer is not the default web browser].

Compatibility

2012-11-24T23:57:56Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**Microsoft Windows 8 64-bit with Microsoft Internet Explorer 10 in Desktop Mode
***I verified its functionality using the demo version of Windows 8
***The desktop mode of IE works with IE URL Lock, but the Metro UI version of Internet Explorer 10 does not appear to use IE URL Lock
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work
*Microsoft Internet Explorer 10 in the Metro UI Mode in Microsoft Windows 8
**The desktop mode works properly with IE URL Lock, but not the Metro UI mode
**I may look into fixing this at some point in 2013. Please let me know if you have any pointers or want to help out with this. Thanks!

Compatibility

2012-01-28T21:29:07Z

Stevenlawrance: Undo revision 1569 by Stevenlawrance (talk)

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work

Compatibility

2012-01-28T21:01:04Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0 without the IE4 Active Desktop update installed
**Installer presently allows installation, but IE URL Lock won't work without the Active Desktop update from IE4 installed

Compatibility

2012-01-28T18:00:24Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows 2000
***Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
**Microsoft Internet Explorer 5.01
***It might work in version 5.00 if it is the only browser helper object installed
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work

Compatibility

2012-01-28T06:55:02Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 and SP3 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows XP Professional x64 SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work

Download

2012-01-28T06:46:21Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.1.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://ieurllock.cvs.sourceforge.net/*checkout*/ieurllock/IEURLLock/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Compatibility

2012-01-25T06:45:44Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Internet Explorer 64-bit in Windows XP 64-bit and Windows Server 2003 64-bit
**IE URL Lock's 64-bit compatibility is for Windows Vista, Windows 7, Windows Server 2008, or higher
**IE URL Lock should work in the 32-bit version of Internet Explorer in Windows XP 64-bit and Windows Server 2003 64-bit
**This incompatibility might get fixed in the next release
*Microsoft Windows NT 4.0
**Installer presently allows installation, but IE URL Lock doesn't work

Download

2012-01-23T15:30:27Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported at this time, but may get supported in the next release. The current 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://ieurllock.cvs.sourceforge.net/*checkout*/ieurllock/IEURLLock/LICENSE.txt GNU Lesser General Public License (LGPL), version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Compatibility

2012-01-23T15:24:09Z

Stevenlawrance: /* IE URL Lock will not work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Internet Explorer 64-bit in Windows XP 64-bit and Windows Server 2003 64-bit
**IE URL Lock's 64-bit compatibility is for Windows Vista, Windows 7, Windows Server 2008, or higher
**IE URL Lock should work in the 32-bit version of Internet Explorer in Windows XP 64-bit and Windows Server 2003 64-bit
**This incompatibility might get fixed in the next release

Compatibility

2012-01-23T15:23:09Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows Vista and Windows 7
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Internet Explorer 64-bit in Windows XP 64-bit and Windows Server 2003 64-bit
**IE URL Lock's 64-bit compatibility is for Windows Vista, Windows 7, Windows Server 2008, or higher
**IE URL Lock should work in the 32-bit version of Internet Explorer in Windows XP 64-bit and Windows Server 2003 64-bit

Compatibility

2012-01-23T15:20:30Z

Stevenlawrance:

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows Vista and Windows 7 installed via ActiveDirectory
**I haven't tested this, but I would be shocked if it doesn't work. Please let me know how it goes so that I can move this up to the tested group above.
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Internet Explorer 64-bit in Windows XP 64-bit and Windows Server 2003 64-bit
**IE URL Lock's 64-bit compatibility is for Windows Vista, Windows 7, Windows Server 2008, or higher
**IE URL Lock should work in the 32-bit version of Internet Explorer in Windows XP 64-bit and Windows Server 2003 64-bit

Download

2012-01-23T15:19:38Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported at this time, but may get supported in the next release. The current 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

How it works

2012-01-22T22:39:51Z

Stevenlawrance:

URL Lock prevents users from navigating to web sites except for those that are allowed through one or more administrator-defined rules, which are written as [[Regular expressions|Perl-compatible regular expressions]]. Users can either exist either on the local computer or across an ActiveDirectory network.

By operating as a browser helper object, the IE URL Lock restricts which locations a user can navigate to within both Windows Explorer and Internet Explorer windows. Active IEURLLock instances automatically detect changes to their registry values and will reload their configurations at their next navigation events, making real-time configuration adjustments on a local PC possible. On ActiveDirectory PCs, users will need to either log off and log back on, run gpupdate, or wait for the next automatic background policy update to see the policy changes.

The Mozilla Firefox version of URL Lock exists in the source code repository, but has not yet been released. It is shelved at present with no plans for being released.

How it works

2012-01-22T22:39:02Z

Stevenlawrance:

Download

2012-01-22T22:37:03Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install both the 32-bit and the 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2012-01-22T22:36:38Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is recommended to install the 32-bit 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2012-01-22T22:18:36Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is advisable to install the 32-bit 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW with MSYS]
**[https://sourceforge.net/projects/mingw-w64/ MinGW-w64]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2012-01-22T22:17:32Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is advisable to install the 32-bit 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
**[http://www.microsoft.com/download/en/details.aspx?id=8279 Microsoft Windows SDK v7.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2012-01-22T22:15:04Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**'''It is advisable to install the 32-bit 64-bit versions to lock down both variations of Internet Explorer.'''
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
**[http://www.microsoft.com/downloads/details.aspx?FamilyID=e6e1c3df-a74f-4207-8586-711ebe331cdc&displaylang=en Microsoft Windows SDK v6.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Compatibility

2012-01-22T22:10:34Z

Stevenlawrance: /* IE URL Lock will not work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows Vista and Windows 7 installed via ActiveDirectory
**I haven't tested this, but I would be shocked if it doesn't work. Please let me know how it goes so that I can move this up to the tested group above.
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below
*Microsoft Internet Explorer 64-bit in Windows XP 64-bit and Windows Server 2003 64-bit
**IE URL Lock's 64-bit compatibility is for Windows Vista, Windows 7, Windows Server 2008, or higher
**IE URL Lock should work in the 32-bit version of Internet Explorer in Windows XP 64-bit and Windows Server 2003 64-bit

Compatibility

2012-01-22T22:07:53Z

Stevenlawrance: /* IE URL Lock is known to work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, 8, or 9
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista, Windows 7, and Windows 7 64-bit
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure IE URL Lock at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.3.0.0. The MSI packages for 1.2.0.0 and newer install a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly
*'''Browser Notes'''
**Internet Explorer 9
***You should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications. Additional details exist on [http://technet.microsoft.com/en-us/library/ff986259.aspx Microsoft's page regarding IE9 group policy configuration]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

==IE URL Lock should work with the following configurations==
*Microsoft Windows Vista and Windows 7 installed via ActiveDirectory
**I haven't tested this, but I would be shocked if it doesn't work. Please let me know how it goes so that I can move this up to the tested group above.
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below

Group policy editor with Active Directory

2012-01-22T22:02:53Z

Stevenlawrance:

To configure IE URL Lock with ActiveDirectory, follow these general guidelines. These instructions presently assume that you have installed the [http://www.microsoft.com/windowsserver2003/gpmc/default.mspx Microsoft Group Policy Management Console], which makes group policy management easier.

Depending on your needs, you can configure IE URL Lock using computer, group, or user policies. Most administrators will likely want to use group policies to configure IE URL Lock to give different user groups different levels of access to Internet Explorer.

Follow these instructions to configure IE URL Lock on a group policy object:
#Start the Microsoft Group Policy Management Console, which is listed in the "Administrative Tools" as "Group Policy Management"
#Create a new group policy object or select an existing group policy object that you want to add an IE URL Lock configuration to [[Image:Gpm-editgrouppolicy.png]]
#The Group Policy Object Editor window will appear. In either the Computer Configuration or the User Configuration, expand the Administrative Templates tree
#If the IE URL Lock category is not present under Administrative Templates, then right-click on Administrative Templates and select Add/Remove Templates. Otherwise, skip to step #7 [[Image:Gpoedit-addremovetemplates.png]]
#In the Add/Remove Templates window, click on the Add button [[Image:Addremovetemplates.png]]
#Navigate to the folder that you installed the IE URL Lock to, which is usually "C:\Program Files\IE URL Lock" if you installed IE URL Lock on the server. If you didn't install it on the server, then [[Download|download the administrative template appropriate for your server operating system]] to "C:\windows\system32\GroupPolicy\Adm". Select the IEURLLock.adm file and press Enter or Open. Press Close on the Add/Remove Templates window [[Image:Ieurllockpolicytemplatefile.png]]
#Edit the IE URL Lock configuration in the Group Policy Editor. The [[Configuration|documentation for each option]] exists both [[Configuration|on this site]] and, if using Windows XP, 2003, or higher, within the group policy editor [[Image:Gpoedit-ieurllock.png]]

Note that for IE9, you should turn on the automatic enablement of newly installed add-ons and turn off add-on performance notifications [http://technet.microsoft.com/en-us/library/ff986259.aspx]. Otherwise, IE URL Lock will not get enabled by default for users, and the add-on performance notifications make it easy for users to turn off add-ons, including IE URL Lock.

Download

2012-01-22T21:56:39Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock-1.3.0.0.msi/download Windows Installer (MSI) file for 32-bit x86]'''
*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/1.3.0.0/IEURLLock64-1.3.0.0.msi/download Windows Installer (MSI) file for 64-bit x64]'''
**It is advisable to install the 32-bit '''and''' 64-bit versions to lock down both variations of Internet Explorer.
**Windows XP 64-bit and Windows Server 2003 64-bit are not supported. The 64-bit MSI will not install in those operating systems.
*[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) files for older versions of IE URL Lock]
*Administrative template for group policy editor
**These are installed automatically when an IE URL Lock MSI package is installed.
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows Server 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
**For Windows Vista, Windows 7, and Windows Server 2008, an ADMX file gets installed by IE URL Lock versions 1.3.0.0 and newer. Microsoft's Group Policy Editor automatically adds the ADMX file to its policy hierarchy.
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License, version 2.1]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
**[http://www.microsoft.com/downloads/details.aspx?FamilyID=e6e1c3df-a74f-4207-8586-711ebe331cdc&displaylang=en Microsoft Windows SDK v6.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Configuration

2011-05-17T19:14:52Z

Stevenlawrance:

This page documents the meaning of each configuration value in URL Lock.

==General Information==
*By default, the IE URL Lock will prevent navigation to all http: and https: web sites, excluding WebDAV folder views. If that is your desired behavior, then no configuration is necessary. Typically, however, at least one or two sites may need to get added to the permitted location regular expression list.
*IE URL Lock automatically detects configuration changes in the registry. As a result, restarting Internet Explorer is not necessary to apply a change.
*At this time, only the [[Group policy editor|Microsoft Group Policy Editor]] is supported. A new configuration user interface will be released on or before July 2007.

==Enable User-Specific Configurations==
*When enabled, which is the default when it is not specified, IEURLLock will apply a user's IEURLLock registry settings after applying the local machine's IEURLLock registry settings to the running configuration
*When disabled, users' IEURLLock registry settings are ignored by IEURLLock, permitting IEURLLock to use only the local machine's IEURLLock configuration

==Debugging==
*When enabled, IEURLLock writes its activities and internal states to a console window that appears when IEURLLock is active
*When this setting is enabled, it controls how verbose IEURLLock will be when it writes messages to the console window
*Each debugging level includes all messages in that debugging level as well as all messages from the debugging levels that are less than the selected debugging level
*When Debugging is disabled, which is the default when it is not configured or when the debugging level is zero, IEURLLock does not create a console window
*If you are simply trying to see the results of regular expression comparisons, set the debugging level to 1 or higher for matches or 2 or higher for non-matches

==Debugging Level==
The following lists the possible values for debugging levels:
*'''0''' No debugging
*'''1''' Errors
*'''2''' Warnings
*'''3''' Important Information
*'''4''' All Information
*'''5''' Minutiae

==Access Denial Location==
*URL, UNC, or File Path
*By default, IEURLLock redirects denied locations to res://webhost.exe/nonavigate.htm. If you want to use a custom access denial location, then specify the URL, UNC, or file path to that location in this setting. This location will not get blocked by IEURLLock
*Note that this path should ideally not redirect to another location unless if that location is permitted via the Permitted Location Regular Expression List
*'''Important:''' If you want to set this to the root path on a web server, then you MUST include the trailing slash or else an access denial will result in an infinite redirect loop if the location with the trailing slash is not in the Permitted Location Regular Expression List (that is, use "http://www.microsoft.com/" instead of "http://www.microsoft.com", as an example)
*A blank path is equivalent to the default access denial location
*If the access denial location specified does not exist, the user will get redirected to Internet Explorer's default access denial page. If this happens when the "Restrict Only Web Locations" setting is explicitly disabled and Internet Explorer's default access denial page is not in the Permitted Location Regular Expression List, the browser window may give up or, if the browser window was being created with the new location, the browser window may not appear at all

==Enable IEURLLock==
*When enabled, which is the default setting when not configured, IEURLLock blocks locations that are not explicitly allowed in the Permitted Location Regular Expression List
*When disabled, IEURLLock does not block any locations

==Restrict Only Web Locations==
*When enabled, which is the default when this is not configured, IEURLLock only blocks locations that begin with http: or https:. As an exception, WebDAV locations are not blocked when opened as a web folder. Once IEURLLock encounters a navigation to a folder-based view, it delays its blocking decision on each navigation until that navigation's view gets created to ensure the proper operation of the Back button to a folder-based view, which causes the browser to contact remote web servers and begin to download the navigated site before being blocked. Fortunately, the blocking decision takes place before scripts are run, so this behavior should be safe, but is not as safe as blocking the location before contacting the remote server
*IEURLLock will make its blocking decisions before the browser contacts the remote web server on browser windows that have not shown a folder-based view yet. As an exception, however, if a permitted site redirects to a denied site, then the blocking decision takes place after the web server serving the blocked location gets contacted but before any scripts are run
*When this setting is disabled, IEURLLock will restrict ALL locations, not just http: and https:. This means that locations such as "Control Panel", C:\, \\server\sharename, res:, and the rest will get blocked unless if they are permitted through the Permitted Location Regular Expression List. No special considerations for folder-based views to accommodate WebDAV are enabled when this setting is Disabled, meaning that all blocking decisions except for the special redirection case mentioned in the previous paragraph happen once the location is known and before any remote servers are contacted. This option grants IT administrators the greatest level of control and security, though one should note that this does not affect the Explorer view within the Common File Open and Save As dialog boxes, which do not load Browser Helper Objects, so there are still some ways around this, though Explorer itself can be locked down."

==Permitted Location Regular Expression List==
*Locations that the user navigates to will get checked against the [[Regular expressions|regular expressions]] in this list, permitting the navigation as soon as it finds a regular expression that matches the location. If none of the regular expressions match, IEURLLock blocks access to that location
*IEURLLock uses Perl-Compatible Regular Expressions through the PCRE library. More information on this library and how to construct regular expressions exists at http://www.pcre.org/ and http://gnuwin32.sourceforge.net/packages/pcre.htm
*Put descriptive names for each regular expression into the Value Name field and put each corresponding regular expression into the Value field
*If any regular expression compilation errors arise when IEURLLock loads its configuration, IEURLLock will display the descriptive name from the Value Name field in the error message. Other than that, IEURLLock does not care what you put into the Value Name field
*If your policy editor does not let you edit the regular expressions that you previously added, then, if you want to, open the Registry Editor and browse to HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER and open up Software\Policies\Steven Lawrance\IEURLLock\AllowList to edit previously-added items. Note that this only works on the local machine. When editing policies in an ActiveDirectory, this workaround will not work
*Example:
Value Name: Microsoft
Value: ^http://(www\.)?microsoft\.com(/|$)
*Case-Insensitive Example:
Value Name: Sourceforge.net Project Web Sites
Value: (?i)^http://([-a-zA-Z0-9])+\.(sf|sourceforge)\.net(/|$)

Main Page

2011-05-16T02:56:09Z

Stevenlawrance:

[[Image:Securitywarning.png|right|Security warning screenshot]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org. I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Main Page

2011-05-16T02:47:04Z

Stevenlawrance:

[[Image:Securitywarning.png|right|Security warning screenshot]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org :-)! I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

MediaWiki:Common.css

2011-05-16T02:41:23Z

Stevenlawrance: Created page with "/* CSS placed here will be applied to all skins */ #bodyContent { max-width: 70em; margin: 0 auto; }"

/* CSS placed here will be applied to all skins */
#bodyContent {
max-width: 70em;
margin: 0 auto;
}

Usage scenarios

2011-02-19T19:50:51Z

Stevenlawrance:

==Block users from accessing web sites using Internet Explorer and Windows Explorer, except for a small set of web sites==
By default, IE URL Lock will block all access to http: and https: URLs except for WebDAV folder views. Only those locations that match an entry in the set of permitted location regular expressions will allow the user to bring up that requested page in Internet Explorer or Windows Explorer.

By storing its configuration information in the system and user policy registry trees and shipping with an Administrative Policy Template file for the Group Policy editor, the IE URL Lock permits IT administrators to centrally manage IE URL Lock's configurations across a network of computers on both a per-computer and a per-user basis when used in conjunction with Active Directory.

==Prevent users from using Internet Explorer as part of a move to a safer browser, such as [http://getfirefox.com/ Mozilla Firefox]==
Instead of using built-in technologies to block Internet Explorer access in ways that were not originally intended such as the proxy.pac approach or [http://support.microsoft.com/?kbid=267930 Microsoft's Ratings System lockdown suggestion], the IE URL Lock brings a fresh approach to locking down Internet Explorer by using the same interface that many spyware programs use -- install itself as a Browser Helper Object to gain full access to the Internet Explorer browser. When active, the IE URL Lock will prevent Internet Explorer from loading and executing web pages from unauthorized locations.

When the user attempts to navigate to an unapproved location, an optional parameter lets IT administrators display a page, as an example, telling the user to contact their support department if the location that they tried to browse to does not work in Mozilla Firefox. If no page or web site location is specified in this setting, the user gets a standard Internet Explorer Navigation Canceled page.

In this scenario, WebDAV access may be desirable while restricting Internet Explorer. By default, WebDAV folder views are not blocked by the IE URL Lock.

==Prevent the Windows Explorer and Internet Explorer from navigating to all locations, including local and network paths such as C:\, \\server\sharename, "Control Panel," and ftp://mysite, except for those that are explicitly allowed==
In addition to locking down Internet Explorer, the IE URL Lock can also lock down the Windows Explorer as it shares the same Browser Helper Object interface.

Perfect for the all-controlling IT administrator, the IE URL Lock can optionally prevent users from navigating to folders on the computer, "My Computer," "Control Panel," and all other locations that either a Windows Explorer or an Internet Explorer window can view. In this mode, no special provisions are made for ensuring that all WebDAV folder views work, permitting IT administrators to lock down outbound WebDAV folder views, too.

Main Page

2010-05-14T16:57:35Z

Stevenlawrance:

[[Image:Project-support.jpg|right]]
[[Image:Securitywarning.png|right]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org :-)! I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Main Page

2010-04-10T18:08:55Z

Stevenlawrance:

[[Image:Project-support.jpg|right]]
[[Image:Securitywarning.png|right]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)
*[http://www.facebook.com/group.php?gid=290364034613 Facebook Group]

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org :-)! I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Main Page

2010-02-28T22:22:47Z

Stevenlawrance:

[[Image:Project-support.jpg|right]]
[[Image:Securitywarning.png|right]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)
*[http://www.facebook.com/slawrance?ref=profile#!/group.php?gid=290364034613 Facebook Group]

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakenly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org :-)! I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Main Page

2010-02-28T22:22:31Z

Stevenlawrance:

[[Image:Project-support.jpg|right]]
[[Image:Securitywarning.png|right]]

The IE URL Lock Browser Helper Object prevents users from navigating to web sites in Internet Explorer and Windows Explorer while permitting URLs that match a Perl-compatible regular expression stored in a registry list.

*[[How it works]]
*'''[[Download]]'''
*[[Usage scenarios]]
*[[Compatibility]]
*[[Licenses]]
*[[Deployment]]
**[[Local computer deployment]]
**[[Active Directory network deployment]]
**[[Basic network deployment]]
*[[Configuration]]
**[[Group policy editor|Configuration using Microsoft Group Policy Editor on a local PC]]
**[[Group policy editor with Active Directory|Configuration using Microsoft Group Policy Editor with Active Directory]]
**[[Configuration editor|Configuration using the configuration editor]]
*[[FAQs|Frequently asked questions (FAQs)]]
*[[Regular expressions]]
*[http://sourceforge.net/projects/ieurllock/ Sourceforge.net project page]
*[https://www.moonlightdesign.org/bugs/buglist.cgi?query_format=advanced&short_desc_type=allwordssubstr&short_desc=&product=URL+Lock&long_desc_type=substring&long_desc=&bug_file_loc_type=allwordssubstr&bug_file_loc=&status_whiteboard_type=allwordssubstr&status_whiteboard=&deadlinefrom=&deadlineto=&bug_status=NEW&bug_status=ASSIGNED&bug_status=REOPENED&emailassigned_to1=1&emailtype1=substring&email1=&emailassigned_to2=1&emailreporter2=1&emailqa_contact2=1&emailcc2=1&emailtype2=substring&email2=&bugidtype=include&bug_id=&votes=&chfieldfrom=&chfieldto=Now&chfieldvalue=&cmdtype=doit&order=Importance&field0-0-0=noop&type0-0-0=noop&value0-0-0= List and file bugs] (use your Wiki user's email address as the username)
*[http://www.facebook.com/slawrance?ref=profile#!/group.php?gid=290364034613 Facebook Group]

This browser helper object helps computer administrators enforce Internet Explorer usage policies through the group policy editor that ships with Windows 2000 and above.

IE URL Lock scales from single home computers running Windows XP to geographically disperse networks running Microsoft's Active Directory system. As an example, you can use it to prevent your parents from mistakingly using Internet Explorer on their home computer. You can also restrict web browsing activity in your Active Directory network to only the work-related sites that each user needs for their duties, which can be specified either for each user or based on group memberships. Other possibilities exist, too.

If you find this software to be useful to you, please feel free to let me know at urllock@moonlightdesign.org :-)! I love to hear from people who use my software and can also help answer any questions or problems that you have with it. Thanks!

Download

2010-02-21T01:34:00Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) file for 32-bit x86]'''
**A 64-bit version might be made later this year
*Administrative template for group policy editor
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
**[http://www.microsoft.com/downloads/details.aspx?FamilyID=e6e1c3df-a74f-4207-8586-711ebe331cdc&displaylang=en Microsoft Windows SDK v6.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2010-02-21T01:30:45Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) file for 32-bit x86]'''
**A 64-bit version might be made later this year
*Administrative template for group policy editor
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
*[http://sourceforge.net/project/shownotes.php?release_id=619010&group_id=136145 Release notes and change log]
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
**[http://www.microsoft.com/downloads/details.aspx?FamilyID=e6e1c3df-a74f-4207-8586-711ebe331cdc&displaylang=en Microsoft Windows SDK v6.1]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2010-02-21T01:28:03Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) file for 32-bit x86]'''
**A 64-bit version might be made later this year
*Administrative template for group policy editor
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
*[http://sourceforge.net/project/shownotes.php?release_id=619010&group_id=136145 Release notes and change log]
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse Galileo for C++]
**[http://www.mingw.org/ MinGW]
**[http://www.mingw.org/wiki/msys MSYS]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2010-02-21T01:26:17Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) file for 32-bit x86]'''
**A 64-bit version might be made later this year
*Administrative template for group policy editor
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock-2000.adm?revision=196 Windows 2000 and Windows NT]
*[http://sourceforge.net/project/shownotes.php?release_id=619010&group_id=136145 Release notes and change log]
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse 3.4 for C++]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Download

2010-02-21T01:25:44Z

Stevenlawrance:

*'''[https://sourceforge.net/projects/ieurllock/files/ieurllock/ Windows Installer (MSI) file for 32-bit x86]'''
**A 64-bit version might be made later this year
*Administrative template for group policy editor
**[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/trunk/IEURLLock.adm?revision=196 Windows XP and Windows 2003]
**[http://ieurllock.svn.sourceforge.net/viewvc/*checkout*/ieurllock/tags/1.1.0.1/IEURLLock-2000.adm?revision=185 Windows 2000 and Windows NT]
*[http://sourceforge.net/project/shownotes.php?release_id=619010&group_id=136145 Release notes and change log]
*Licenses
**IE URL Lock: [http://www.gnu.org/copyleft/lesser.html GNU Lesser General Public License]
**Perl-Compatible Regular Expressions Library: [http://www.pcre.org/license.txt PCRE License]
*[http://ieurllock.svn.sourceforge.net/viewvc/ieurllock/ Source code]
*Build environment
**[http://www.eclipse.org/ Eclipse 3.4 for C++]
*[https://www.moonlightdesign.org/urllock/shared/ Shared folder]

Compatibility

2010-02-21T01:23:14Z

Stevenlawrance: /* IE URL Lock is known to work with the following configurations */

==IE URL Lock is known to work with the following configurations==
*'''Without Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6, 7, or 8
**IE URL Lock deployment
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
***Remote
****Copy an installed "\Program Files\IE URL Lock" folder to a target computer
****Import the [http://ieurllock.sourceforge.net/IEURLLock-RemoteDeployment.reg remote deployment registry file] into that computer's registry
**Microsoft Windows Vista and Windows 7
***Local
****Double-click on the Windows Installer (MSI) file and follow the on-screen instructions
****Only when used with version 1.2.0.0 or higher or version 1.0.3.3 or earlier. Versions between those two are incompatible with Windows Vista and Windows 7.
****The non-business editions of Windows Vista and Windows 7 do not ship with gpedit.msc, which unfortunately requires manual registry editing to configure at this time.
****Note that if you upgrade a Windows system from XP or earlier to Windows Vista or later, you will need to reinstall IE URL Lock 1.2.0.0. The MSI package for 1.2.0.0 installs a different DLL depending upon which version of Windows is being used.
***Remote
****Remote installation without ActiveDirectory is not supported in Windows Vista and Windows 7. The wevtutil.exe program needs to be run to register the event provider manifest, and I presently don't know how to do that remotely without a normal ActiveDirectory MSI installation. Please let me know if you know of a way.
**[http://www.tatanka.com.br/ies4linux/page/Main_Page IEs for Linux] with Internet Explorer 5, 5.5, or 6, which uses [http://www.winehq.org/ Wine]
***To install, run the following command, adjusting the path as necessary for the different IE versions. The license agreement does not appear, but it will install if you accept it anyway
****export WINEPREFIX=~/.ies4linux/ie6; msiexec /i ~/IEURLLock-1.0.3.3.msi
***Note that I haven't tried to configure IE URL Lock in IEs for Linux. Wine doesn't ship with gpedit.msc by default. Configuration will be possible when the new XULRunner-based configuration tool is released. For now, manual tweaking of the registry should permit you configure IE URL Lock in IEs for Linux
*'''With Active Directory'''
**Microsoft Windows XP Professional SP2 with Internet Explorer 6 or 7
**Microsoft Windows Server 2003 SP1
**IE URL Lock deployment
***Computer-based policy (assigned): Installation and uninstallation when affected computers are rebooted
***User-based policy
****Assigned: Install at user logon is required. Uninstallation does not appear to always work when logging on as a user who does not have IE URL Lock in the user policy, even when the "Uninstall this application when it falls out of the scope of management" option is selected (am I doing something wrong? Please let me know :-)
****Published: Installation and uninstallation via "Add New Programs" in "Add or Remove Programs" works properly

==IE URL Lock should work with the following configurations==
*Microsoft Windows Vista and Windows 7 installed via ActiveDirectory
**I haven't tested this, but I would be shocked if it doesn't work. Please let me know how it goes so that I can move this up to the tested group above.
*Microsoft Windows 2000
**Use the IEURLLock-2000.adm group policy template instead of IEURLLock.adm. The Windows 2000 version lacks built-in documentation, though you can refer to this web site for the parameter and value meanings
*Microsoft Windows NT 4.0
**Without Active Directory, of course
*Microsoft Internet Explorer 5.01

==IE URL Lock will not work with the following configurations==
*Microsoft Windows 95, 98, 98SE, and ME
*Microsoft Windows CE
*Microsoft Internet Explorer 5.00 or below