Hi,
I want to lock down access to the local file system as much as possible, yet still allow a user to run Internet Explorer. I was thinking of an explict deny on the C: drive, which would then be inherited, with some explit allows on the particular files
& folders that IE needs in order to run. I'm running in Kiosk mode, but my main vulnerability is that I need to allow users to print, and they can access the local file system via the Print Dialog :(
Does anyone have a list of files and folders that IE needs either read-only, or read-write access to in order to function properly? Ideally I need to be able to set this up for IE7, 8, and 9...
Many thanks,
Stu