How to secure Internet Explorer

Hi list,

this is my first time posting so please don't flame me if this topic has been discussed before...

My intention for this posting is this new IE Exploit. If you don't already know it you can read about it here: http://archives.neohapsis.com/archives/bugtraq/2002-11/0041.html

A couple of weeks ago I rolled out IE6 SP1 in the hope for some silence in the ongoing battle of rolling out new patches for IE / Outlook. Ironically some messages on bugtraq indicated that only with this version the exploit works perfectly.

So back to my question, what can / should a responsible sysadmin do to protect his internet explorer users?

Some topics that come to mind:
- is it feasible to disable active scripting for the internet zone?
  ( I already had problems with my user after I disabled activeX...)
- what happens if you lockdown the local computer zone?

• do AV Products protect you from this kind of vulnerabilities?

Hoping to get some replies...

Regards
Bjoern

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek