FDV removal vs "Disabling" Internet Explorer?

[orge]

Hi,

In a recent thread I was trying to remove ie from a server installation, but problems and dependencies mean that this isn't really feasible (http://snipurl.com/nem2). I've seen that an alternative is to disable ie by setting up a fake proxy - in addition you can disable all the activex controls under the security settings.

I'm not really happy with this as solution, but it's looking like the only option . I was wondering if anybody here has any views/information on how secure this arrangement would be compared to a complete removal?

Cheers,

James

[tommyp]

Have you seen the information on HFCLEANUP? It may be a start for you. However, it's a bit buggy for dialup.

[orge]

Yes, I've had a play with hfcleanup and I've had some success - I really like the way you can tailor your requirements. However, I have a number of services which will not run/install without IE. Whilst I would like to ditch those services, it's not really an option as they are (otherwise) quite good bits of software (they're not ms).

It's a shame, cause I have invested quite a lot of time/effort in trying to do this. It's also quite ironic that the wprkstations on our network are going to be cleaner/faster/more secure than our server! Just the way it goes, I guess...

Cheers,

J

Edited March 10, 2006 by orge