Sharing How to Solve a Browser Security Issue

by | Jun 17, 2010 | Operations & Business Management, Operator Performance

Jim Cahill

Chief Blogger, Editor

One of the things that makes some blogs so valuable is the technical expertise they can share with words, pictures, audio, and video. One example is Bruce Greenwald‘s Process Control Musings blog. Bruce is a VP of engineering services for the RE Mason Company, an Emerson local business partner in the Carolinas. The post that brought this to mind was Securing IE for Alarm Response Procedures.

Bruce received a question from a person with a major pharmaceutical manufacturer. It was about being able to call up documents inside the Syncade Document Control and Archiving module from a DeltaV control system operator display. Bruce described the problem:

The potential roadblock they hit was a security risk. If you look at the IE [Internet Explorer] window that the PDF appears in, you’ll notice the menu bar is present. The risk is if someone were to click on the File menu, then click on Save As… – they could start dropping html files all over the DeltaV system. Just as critical is having the toolbar buttons or the address bar along the top.

Bruce described a solution with words and pictures:

Click on Start, then Run… and type gpedit.msc – drill in to User Configuration -> Administrative Templates -> Windows Components -> Internet Explorer. Then look for a Setting named “Turn on menu bar by default”. Double click on it and change it to Disabled. That gets rid of the menu bar.

Bruce also described how to remove the Internet Explorer address bar through changes in the registry settings.

At the end, he shows the finished secure look of an Internet Explorer PDF document with the browser address bar and menu bars from the displayed PDF file removed.

Every day people at process manufacturers, process automation companies, integrators, and others share the answers to questions like these. The overwhelming majority of the time this knowledge is trapped in email inboxes and sent items folders.

Thank you Bruce for sharing this with the world, especially with the next person trying to do something similar. Your post will undoubtedly be at or near the top of their search results. Anyone else willing to share his or her expertise?

GreenPodcast.gif MP3

Submit a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Submit a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Subscribe for Updates

Follow Us

We invite you to follow us on Facebook, LinkedIn, Twitter and YouTube to keep up to date on all the latest news, events and innovations to help you take on and solve your toughest challenges.

Want to re-purpose, reuse or translate content?

Please do, Just link back to the post and send us a quick note so we can share your work. Thanks!

Our Global Community

Emerson Exchange 365

The opinions expressed here are the personal opinions of the authors. Content published here is not read or approved by Emerson before it is posted and does not necessarily represent the views and opinions of Emerson.