these reg files will help locking down Internet Explorer (or revert from locking down) Disclaimer: if this does/doesn't do what you want, that is your fault for running it. use at your own risk! -------------------------------------------------------- crm_stuff.reg has various registry entries in it. you need to review them all!!! Then add the (after modifying the url) the CRM.lnk file to your startup folder (so it runs after startup), or modify the reg files to add the IE -k url line to a Run/RunOnce registry entry (this is up to you). Then reboot. With all the other registry entries... this *should* make it very difficult for your agents to get anywhere else. to revert these settings, you need to boot up in safe mode and install revert_crm_stuff.reg then reboot. future versions will probably disable cdrom autorun, and other various things, so make sure you ALWAYS read and understand the settings BEFORE installing these reg files.