This article tells you how to enable Internet Explorer 9 (IE9) Browser Helper Object (BHO)
Enabling this feature ensures that the students cannot use IE9 to disable the Impero software internet restrictions. Without enabling this feature any student could go into Internet Explorer -> Tools -> Manage options or Manage add-ons and disable the Impero BHO which would then allow the student full access to the internet and Impero would not be able to protect/restrict them. In IE9 the student may also see a pop up that asks them to enable or disable the BHO so without enabling this feature the student could have full access to the internet and Impero would not be able to protect/restrict them.
1. Group Policy changes required to enable the Impero BHO
In your group policy object, for either "Computer Configuration" or "User Configuration" browse to the following three options:
Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> Allow third-party browser extensions
ENABLE this policy
Administrative Templates -> Windows Components -> Internet Explorer -> Disable add-on performance notifications
ENABLE this policy
Administrative Templates -> Windows Components -> Internet Explorer -> Automatically enable newly installed add-ons
ENABLE this policy
Administrative Templates -> Windows Components -> Internet Explorer -> Do not allow users to enable or disable add-ons
ENABLE this policy
User Configuration ->Administrative Templates -> Start Menu and Taskbar -> Do not allow pinning programs to the Taskbar
ENABLE this policy
Administrative Templates -> Windows Components -> InternetExplorer -> Turn off Managing SmartScreen Filter for Internet Explorer 9
ENABLE this policy and in the options choose to turn the filter OFF
Administrative Templates -> Windows Components -> Internet Explorer -> Turn off Managing SmartScreen Filter for Internet Explorer 8
ENABLE this policy and in the options choose to turn the filter OFF
Additional Information:
If you have already deployed IE9 and you have roaming profiles, your users may have already disabled the Impero Browser Helper Object. Setting the group policy action above will stop them from disabling it in the future but you will need to delete a registry entry which was made by IE9 when the user disabled the Impero BHO.
Using a logon script (please do not use the Impero Remote Command Prompt as this will not work) type the following:
Reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{220A4F50-B00B-484B-8CB3-E8C9032CFAE9} /f
Note: This will work on Windows XP, Vista and 7
2. Impero Block Policies
You can use Impero to stop the students from disabling the BHO, although it is limited as IE9 will still pop up to ask to enable or disable BHOs. The message is called performance notifications and can only be disabled in Group Policy.
In Advanced Policies create 5 block policies:
Windows caption - *InPrivate Browsing*
Windows caption - *New Web Query*
Windows caption - *Internet Options*
Windows caption - *Manage add-ons*
Windows caption - *Choose add-ons*
3. Use the Impero Proxy
The third way to combat this issue is to enable the Impero Proxy which can be done by:
Right click the “Entire Network” group -> Group settings tab -> Computer security -> Untick "Only filter Internet Explorer web traffic (disable the internal Impero Proxy)
Note: If your current proxy uses NTLM authentication then the Impero Proxy may not work.
