Internet explorer policy based

[jpatto]

Im trying to build a policy for internet usage which is "suppose" to be safe for users.

The idea is:

If a webpage needs to install any programs/scripts admin rights are required (i.e. Flash or at least authorised by AD policy) etc etc

Ive seen a few policies in AD but before i test anything out i wondered if theres anything you would recommend (other than using a proxy or ISA as it has to be policy based within AD)

Thanks