I'd love to have the peace of mind of knowing that none of my desktops have toolbars, "browser helpers" or any other crap like that running.
Has anybody done this successfully with Group Policy?
I found this article, but it's not all that clear:
http://support.microsoft.com/kb/883256
If I want to ban all plugins but the Google Toolbar, Flash & Windows Update on XP, there isn't a clear explanation on how to do it. It seems that I would have to know the ClassID of every toolbar I would like to allow.
The article doesn't really go into how an admin would find these ClassIDs. Does Flash have a different ClassID for each version? Does it vary by OS? What about Windows Update on XP boxes - it requires a plugin that would need to be expressly enabled.
It's such a common problem that there should be an easy solution. It would be great if there was just a checkbox list of common plugins, so you could enable Flash for everyone, Google Toolbar for devs, Windows Update for XP, etc.