Disabling IE add-ons and toolbars with Group Policy?

Solution 1:

Disabling the option "Enable third-party browser extensions" under Tools -> Internet Options -> Advanced (or Control Panel -> Internet Options) successfully disables most browser bars while still allowing the typical plugins (Java, Flash, etc).

If I recall correctly you can control this option in GP. Setting can be found under 'User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> Allow third-party browser extensions'

Solution 2:

For XP with IE6, your KB source is a workable solution.

I added the CLSID for flash (found from youtube.com HTML source) and blocked it by adding it to Local Security Policy "User Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > Add-On Management > Add-on List"

Put in the CLSID and a 0 for value (disable) and on next IE refresh, Flash wouldn't load.

Sounds like adding a list of the most common offenders to a GPO would take care of most of your issues.

---

Solution 3:

I have the same questions you do in regards to ClassID's possibly changing when javascript & flash are upgraded.

Anyhow in the process of trying to find more info on this I figured out in IE9 you can select an add-on & hit 'More Information' in the bottom-left'ish & it gives you the Class ID. I confirmed IE6 doesn't have this. I don't have any IE7 or 8's available to test currently. However the microsoft article DOES show you how to find the Class ID's that were blocked in the section 'Troubleshooting the Manage Add-ons feature'. Sadly it doesn't look like a quick job, will take some research