Using Ranger to prevent Internet downloads

Question

Can Ranger stop users from downloading files from the Internet?

Symptoms

N/A

N/A

Cause

Users downloading and installing software from the Internet can introduce viruses, trojans and spyware.

Resolution

Ranger can assist to control or limit the installation of software from the Internet by using a number of measures.

The solutions may not provide a 100 guarantee and will depending on how many methods are implemented however they can significantly reduce the number of programs being installed.

Some of the solutions provided are only applicable to Internet Explorer.

Instructions

Title Checks
Title checks can be used to close dialogs with certain text, therefore by configuring title checks such as "Downloading", "Installing", "Setup" or "File Progress" could prevent users from download files.

Setup Wizards
Some applications use third party setup wizards for example 'InstallShield' to install their own software. These setup wizards can be blocked by Rangers application security. This could prevent users from installing software however it would be limited to those programs that use these software wizards.

Internet Explorer Security Settings
Internet Explorer can be configured to restrict access to particular web sites, prevent users from downloading certain file types or stop file downloads altogether.

IE's configuration settings are profile based therefore Ranger can manipulate these settings on a group or user basis. To do this you need to configure Ranger to apply a Internet Security policy.

Depending on your Ranger version you may need to download the policy file. Browse to your RangerADMfiles folder and see if IESettings.adm exists.

In RangerAdmin, add the IEsettings adm file to both 9x and NT/2000 settings.

Go to RangerAdmin Edit Settings Ranger Profiles Tab tab Add Select Admfiles directory select IEsettings.adm file

Once the ADM file has been added, Ranger Admin will refresh, then go to Environment Policies section to set the 'Disable file downloads in Internet Explorer'

Testing

After setting the policy, logon as a user within the controlled group and then launch IE. Try to download a file from the Internet.