IE7 setup for security!

[Galt]

The following ae settings I use in IE7! Hope you find them useful!


In IE 7, click Tools, Internet Options, and then select the Security tab. With the Internet zone selected, the security level by default should be set to Medium-High. Click the Custom Level button. Set the following choices:

.NET Framework
• Loose XAML: Disable
• XAML browser applications: Disable
• XPS documents: Disable

ActiveX controls and plug-ins
• Binary and script behaviors: Disable
• Run ActiveX controls and plug-ins: Disable
• Script ActiveX controls marked safe for scripting: Disable


Downloads
• Font download: Disable
• Enable .NET Framework setup: Disable

Enable .NET Framework setup: Disable

Miscellaneous
• Allow META REFRESH: Disable
• Allow Web pages to use restricted protocols for active content: Disable
• Display mixed content: Disable
• Drag and drop or copy and paste files: Disable
• Installation of desktop items: Disable
• Launching applications and unsafe files: Disable
• Launching programs and files in an IFRAME: Disable
• Navigate sub-frames across different domains: Disable
• Software channel permissions: Maximum Safety
• Submit non-encrypted form data: Disable
• Userdata persistence: Disable
• Web sites in less privileged Web content zone can navigate into this zone: Disable

Scripting
• Active scripting: Disable
• Allow programmatic Clipboard access: Disable
• Scripting of Java applets: Disable

Some of the above settings will interfere will the operation of some legitimate Web sites.

http://secunia.com/

IE7 is still a better browser than Firefox2

Changing IE 7's default settings can remove some functionality from Web sites you may regularly visit. For example, disabling "active scripting" turns off JavaScript. Many sites use JavaScript to activate various menu options. For example, the menu at the WindowsSecrets.com site (but not in the newsletter) shows you what second-level options are available when you hover your mouse over a top-level option.

But not all sites have this kind of fall-back design. Here are my recommendations on how to use the Web effectively, despite the fact that you've made IE 7 more secure:


• Add legitimate IE-only sites to the Trusted Sites zone. If you encounter a site that you know to be responsible — but it requires Internet Explorer for some reason — you can easily add the site to IE's Trusted Sites zone. In IE 7, pages in the Trusted Sites zone run at the Medium security level (not Medium-High as in the Internet zone) and aren't restricted by the customizations you've applied to the Internet zone.

To add a Web address to the Trusted Sites zone in IE, click Tools, Internet Options, and then select the Security tab. Select the Trusted Sites zone, click the Sites button, and add the address of the site you wish to visit. If the site doesn't use encrypted pages, turn off the option Require server verification (https for all sites in this zone.

[CrowdAds]

[Znod]

Thank Galt. I may try IE using your settings. Doing so at least is on my list now.

[felix8406]

Good info. I'll be trying this later.