Locking Down Internet Explorer

[Scarecrow Man]

The security model for Internet Explorer has been based on security zones. Different Web pages execute in different zones, which have varying levels of privilage. To see this, go to Tools | Internet Options and click the Security tab. Click on a zone and you can add a site to it if you like or change the security settings.

One of the most important zones is the My Computer security zone, which is actually hidden by default. (To view and modify settings for this zone, see "How to Enable the My Computer Security Zone in Internet Options" at http://support.microsoft.com/?kbid=315933.)

The problem is that a large number of cross-zone vulnerabilities, such as the one described at http://www.securityfocus.com/bid/9628/ have let Web pages on the Internet execute script and other code in the My Computer Zone. So, Microsoft has plugged these holes with SP2, but SP2 is not an option to everyone, especially those who do not run Windows XP. These people need another solution. You could do the lockdown yourself--Microsoft provided instructions some time ago (http://support.microsoft.com/default.aspx?scid=kb;en-us;833633)-- but it isn't easy, and you might break some applications in Windows of from third parties.

Or you can get Qwik-Fix Pro from PivX, which does the same thing for all Win32 versions of Windows. (Expected prices: $60 per desktop, $500 per server, volume discounts available; home edition free until October 31. PivX Solutions LLC, http://www.pivx.com/qwikfix

Sorry it's no longer free. I just read this article in a PC magazine, and thought everyone should know.

[r4may]

The Home edition is available free until 31st October 2004. There are different versions for win95 upwards and a trial version for servers.

http://www.pivx.com/qwikfixDownload.asp

Have download home version to give it a try.