I wonder whether IE has any equivalent to NoScript, like a BHO that would allow you to decide whether to add the site you're on or any other sites scripts run off of to Trusted Sites or Restricted Sites or keep them in the Internet zone, which IMO would be most helpful after amping up the security restrictions on the Internet zone; it would help for the computers I manage where people prefer IE, and where I'm not acting like some evil IT overlord that locks down everything.

I'm not looking for an app that automatically populates Trusted Sites; ZonedOut does that trick, and that app, along with Spybot and Spyware Blaster, does the same thing with Restricted Sites.

12/6/2010 6:45:06 PM

gpedit.msc

12/7/2010 8:28:22 AM

You can add registry keys pretty easy for this. How were you planning on deploying this? It sounds like a one by one kinda thing...so you could just create a bunch of keys and 'execute' then on each computer...

or were you hoping for a popup kinda thing when you're browsing in IE that lets the user choose as they're switching sites?

12/7/2010 1:25:57 PM

basically a sort of pop-up thing

it would kinda work like Ghostery, with a button that can be added to the command bar, and then if scripts are blocked (especially after setting the Internet zone to high security) you can tell whether to add a certain site to Trusted Sites, or if you want to block it even more you can add it to Restricted Sites

and it would be even cooler if it could ape more of the functionality of NoScript, like XSS and ClickJacking filters, an Application Boundaries Enforcer, and optional protection against META refreshes, web bugs, and auto-launching of plugin content, even on Trusted Sites
and also the ability to just temporarily allow active content

I fully realize that you can use the Group Policy editor or add a bunch of entries to the Registry, but if you want the user to easily determine for him- or herself what content to allow, much as Firefox does with NoScript, you need something that can be done from right within the main user-interface, without even needing to go into Internet Options.

then again, considering the zone model has been around for 12 years and AFAIK nobody has made a BHO for this, there might be some nasty surprises along the road to any such attempt

12/7/2010 3:37:39 PM

if the user wants this much control, tell them to use another browser, otherwise they inherit your group policy?

12/7/2010 5:05:44 PM

[Edited on December 7, 2010 at 5:07 PM. Reason : oh motherfucker]

12/7/2010 5:06:51 PM

^^

Quote :

"not acting like some evil IT overlord that locks down everything"

12/7/2010 9:00:16 PM

k this looks like a step in the right direction: http://www.jasons-toolbox.com/programs.asp?Program=Trust%20Setter

12/11/2010 1:09:59 AM