Learn two ways to disable Internet Explorer
学习两种禁用IE的方法
作者：Michael Mullins CCNA, MCP
翻译：endurer
Keywords: Web browsers | Security threats | Microsoft Windows | Security management
关键字：网页浏览器 | 安全威胁 | 微软Windows | 安全管理
http://techrepublic.com.com/5100-1009_11-5838360.html?tag=nl.e101
Takeaway:
Internet Explorer's laundry list of vulnerabilities and Firefox's growing popularity have made many users consider their browser alternatives. If you've had enough of dealing with IE's security flaws and decided to make a switch, learn two ways you can disable IE for your users.
概述：
Internet Explorer的缺陷细目清单和火狐的日渐流行已经使一些用户考虑他们的浏览器替代品。如果你已经疲于应付IE的安全漏洞并决定转换，学习两个可以为你的用户们禁用IE的方法罢。
《endurer注：
1。laundry list n. 细目清单
2。had enough of vbl.受够了,再忍受不住了》
Microsoft's Internet Explorer (IE) has long been a favorite target of hackers, and the frequent discovery of vulnerabilities over the years has only offered more incentive. In fact, Microsoft is currently researching a new, unpatched flaw that could put users at risk of a cyberattack.
微软的Internet Explorer (IE)向来是hacker们喜欢的对象，常年频繁的缺陷发现提供了更多的刺激。实际上，微软正在研究一个可置用户于网络攻击危险的新的、未打补丁的漏洞。
《over the years prep.这些年来,在这几年中》
In addition, the growing popularity of the Firefox browser has offered computer users a browser alternative—one that millions of users have opted to try. While not immune to its own security issues, the default installation of Firefox is rather secure, and it doesn't support ActiveX controls, a common culprit of security issues.
另外，火狐的日渐流行已经为计算机用户提供了浏览器替代品--上百万的用户已经选择了尝试。尽管本身存在安全问题，但火狐的默认安装是比较安全的，并且它不支持ActiveX控件，这个安全问题的共同的罪魁祸首。
《opt to do sth. 选择做某事》
So if you've had enough of dealing with IE's security flaws, how do you disable or remove Internet Explorer? If you're running Windows 2000 or XP, there's good news and bad news.
所以如果你已经疲于应付IE的安全漏洞，你怎样禁用和移除IE？如果你正使用Windows 2000或XP,那么有一个好消息和一个坏消息。
The bad news is that you can't remove IE without crippling your operating system. However, the good news is that you can disable IE for your users and move to a different browser.
坏消息是你不能无损操作系统地移除IE。然而，好消息是你可以为你的用户们禁用IE并转向不同的浏览器。
Several simple, popular methods exist to disable IE. The easiest way to remove users' ability to browse with IE is to add a bogus proxy server to IE's Internet Settings.
已经有一些简单、常见的的禁用IE的方法了。移除用户使用IE浏览的功能更容易的方法是在IE的Internet选项中添加一个伪代理服务器。
Follow these steps:
步骤如下：
In IE, go to Tools | Internet Options.
在IE中，工具 | Internet选项
On the Connections tab, click the LAN Settings button.
在“连接”选项卡，点击“局域网设置”按钮。
In the resulting dialog box, select the following check box in the Proxy Server section: Use a Proxy Server For Your LAN (These Settings Will Not Apply To Dial-up Or VPN Connections).
在对话框中，在“代理服务器”节中选定下列选择框：为LAN使用代理服务器（这些设置不会应用于拨号或VPN连接）。
Enter 0.0.0.0 in the Address text box.
在地址文本框中输入：0.0.0.0
Enter 80 in the Port text box, and click OK.
在端口文本框中输入：80，然后击点“确定”按钮。Please note that adding a bogus proxy server to your Internet settings won't affect Automatic Windows Update from connecting and updating your operating system.
请注意：添加一个伪代理服务器到Internet选项中将不影响Windows系统的自动更新功能。
You can also restrict Internet settings via Group Policy. Follow these steps:
你也可以通过组策略限制Internet选项。步骤如下：
On your domain controller, right-click the organizational unit that contains your domain users, and select Properties.
在域控制器上右击包含你的域用户的“组织单位”（Organizational Unit，OU），选择“属性”。
On the Group Policy tab, click Edit.
在组策略选项卡上点击“编辑”。
Expand User Configuration to set restrictions on a per-user basis.
展开用户配置来设置在个别使用者为基础的限制。
Expand Windows Settings, and expand Internet Explorer Maintenance.
展开Windows设置，和“Internet Explorer维护”。
Select Connection, and double-click Proxy Settings.
选择“连接”，双击“代理服务器设置”。
Select the Enable Proxy Settings check box, add 0.0.0.0 to the HTTP entry, and click OK.
选定使用代理服务器设置选择框，添加0.0.0.0 到 HTTP entry，点击“确认”。
Expand Administrative Templates, and expand Windows Components.
展开管理模板，和Windows组件。
Select Internet Explorer, and double-click Disable Changing Proxy Settings.
选择Internet Explorer，双击禁止改变代理服务器设置。
Select Enabled, and click OK.
选择可用，点击“确认”。
Remember that Enabled sets a restriction, Disabled prevents a restriction from applying to a group of users (even if you enable it for a broader category of users), and Not Configured doesn't set the restriction.
记住：使可用设置限制，禁用则防止限制应用到一个用户组（你甚至能使它对更大的用户类可用），而不配置则不设置限制。
Before you take any of these steps, download another browser, and test it on your current configuration. I highly recommend Mozilla's Firefox. After you install a new browser, answer Yes when it asks whether to make it your default browser.
在你做这些步骤前，下载其它浏览器，在当前配置下测试。我强烈推荐Mozilla的火狐。你安装新的浏览器后，当它询问是否设为默认浏览器时，回答“是”。
Final thoughts最后总结
No matter how many patches Microsoft releases, ActiveX and the Browser Helper Object (a file loaded with Internet Explorer) are all an attacker needs to control your system and steal your data. Microsoft designed IE for functionality—not security. And antivirus software can't defend your network against IE exploits.
不论微软发布多少补丁，ActiveX和浏览器帮助对象（一个随IE装载的文件）是攻击者控制你的系统和窃取你的数据所需要的全部。微软设计IE以多功能性--不是安全性。反病毒软件不能防卫你的网络免于IE漏洞利用。
《1。no matter 不论...
2。defend against 防卫...以免于》
Windows security isn't about eliminating security holes—it's about managing risk and user functionality. All operating systems have vulnerabilities, but Windows' popularity makes it the target of choice for most black hats.
Windows安全不在于消除安全漏洞——而在于管理风险和用户功能。所有操作系统都有缺陷，但Windows的流行使它成为大多数黑帽子选择的对象。
《be about 从事于》
