ComputerSecurityStudent (CSS) [Login] [Join Now]




|WINDOWS >> Windows 2008 Server >> Current Page |Views: 8547

(Windows 2008 Server: Lesson 9)

{ Configuring Internet Explorer Group Policy }


Section 0. Background Information
  • Why should we configure group policies for Internet Explorer? 
    • As a security focal, you want to ensure that you have the ability to view a user's browsing history.
    • Browsing history might contain forensic evidence for any possible attack that might occur in the future.
    • In addition, by disabling the possibility of allowing a user to delete their own history, this option could serve as a deterrent to surfing prohibited material.

     

Section 1. Login to your W2K8 server.
  1. Start your Windows 2008 Server
    • Instructions
      1. Click on W2K8 Server
      2. Click on Play virtual machine

     

  2. CRTL + ALT + DELETE
    • Instructions
      1. Virtual Machine
      2. Send Ctrl+Alt+Del

     

  3. Login as Administrator
    • Click on the Administrator icon.

     

  4. Login
    • Command: Provide the password for the Administrator account.

     

Section 2. Launching  Group Policy Editor
  1. Launch Group Policy Editor
    • Instructions:
      1. In the search box, type "gpedit.msc"
      2. Click on gpedit

     

  2. Navigate to the Internet Explorer Policies
    • Instructions:
      1. Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer

 

Section 3. Prevent the deletion of temporary Internet files and cookies
  1. Select "Prevent the deletion of temporary Internet files and cookies"
    • Instructions:
      1. Right click on "Prevent the deletion of temporary Internet files and cookies"
      2. Select Properties
    • Note:
      • If you enable this policy setting, users will not be able to delete temporary Internet files and cookies.

     

  2. Edit "Prevent the deletion of temporary Internet files and cookies"
    • Instructions:
      1. Click on Enabled
      2. Click on Apply
      3. Click on OK

     

  3. View your results
    • Instructions:
      1. Select the Standard tab at the bottom of the right window.
      2. Notice that the state of "Prevent the deletion of temporary Internet files and cookies" is now Enabled.

 

Section 4. Turn off Delete Browsing History functionality
  1. Select "Turn off Delete Browsing History functionality"
    • Instructions:
      1. Right Click on "Turn off Delete Browsing History functionality"
      2. Select Properties
    • Note:
      • If you enable this policy setting, users cannot perform the "Delete Browsing History" action in Internet Options for Internet Explorer 7.

     

  2. Configure "Turn off Delete Browsing History functionality"
    • Instructions:
      1. Select Enabled
      2. Click on Apply
      3. Click on OK.

 

Section 5. Disable Configuration History
  1. Select Disable "Configuration History"
    • Instructions:
      1. Right Click on Disable "Configuration History"
    • Note:
      • If you enable this policy setting, a user cannot set the number of days that Internet Explorer keeps track of the pages viewed in the History List.
      • You must specify the number of days that Internet Explorer keeps track of the pages viewed in the History List.
      • Users will not be able to delete browsing history.

     

  2. Configure Disable "Configuration History"
    • Instructions:
      1. Select Enabled
      2. Type 90 in the Days to keep pages in History text box.
      3. Select Apply
      4. Select OK.

 

Section 6. Update Group Policies
  1. Open the Command Prompt
    • Instructions:
      1. Start --> Command Prompt

     

  2. Update the Group Policies
    • Instructions:
      1. gpupdate /force

 

Section 7. Verify results in Internet Explorer
  1. Verify results in Internet Explorer
    • Instructions:
      1. In the search box, type "explorer"
      2. Click on Internet Explorer

     

  2. Open Internet Options
    • Instructions:
      1. Tools --> Internet Options

     

  3. Review Internet Options
    • Instructions:
      1. Notice the Delete button is not in focus, as in it is not clickable.
      2. Click on the Settings button.

     

  4. Review Temporary Internet Files and History Settings
    • Notes:
      1. Notice that "Days to keep pages in history:" cannot be changed.
      2. Also, the "Days to keep pages in history:" has been set to 90 days.

 

Section 8. Proof of Lab
  1. Open a Command Prompt
    • Instructions:
      1. Start --> Command Prompt

     

  2. View Group Policy Results
    • Instructions:
      1. gpresult /V | more
      2. Before pressing the <Enter> key more than one continue to the next step.

     

  3. Using the gpresult utility
    • Instruction:
      1. Keep pressing the <Enter> key until you see "User Rights"
      2. Once you see "User Rights" press the <Ctrl>+c keys
      3. date
      4. Press Enter
      5. echo "Your Name"
        • Replace the string "Your Name" with your actual name.
        • E.g., echo "John Gray"
    • Proof of Lab Instruction:
      1. Do a PrtScn
      2. Paste into a word document
      3. Upload to Moodle.

 



Help ComputerSecurityStudent
pay for continued research,
resources & bandwidth