URL Moniker Services Security (Windows Embedded CE 6.0)

1/6/2010

The URL security zones templates in Windows Embedded CE set default policies for URL actions within the following security zones: My Computer, Local Intranet, Trusted Sites, Internet, and Restricted Sites. For more information about URL actions and their corresponding policies for each zone, see URL Security Zones.

For more information about Windows Embedded CE security services, see Enhancing the Security of a Device.

Best Practices

Create a custom security manager

If your application is a host for the WebBrowser control or MSHTML, implement the IInternetSecurityManager interface to create a security manager to specifically handle those URL policies and actions that are important to your application.

Monitor activity on your Web site

Use the Hit Logging to track page activity and atypical usage patterns.

Write safe asynchronous pluggable protocols

Ensure that you write safe asynchronous pluggable protocols that do not pose security threats to your device, such as, by overriding the default protocol and tampering with data on the device. For more information about asynchronous pluggable protocols, see Using Asynchronous Pluggable Protocols.

Use URL Security Zones

Applications that host a Web browser control can manage the default URL Security Zone settings by implementing the IInternetZoneManager interface. Be aware that any changes that are made using IInternetZoneManager will not be static because the user can override them. For more information see URL Security Zones.

Use caution when you change URL Security Zone settings

Ensure that the client application uses the correct security zone setting. Changing this setting may pose a potential security threat to the device. For information about the default security zone settings, see URL Security Zones.

Default Registry Settings

Some registry settings for URL Monikers may have security implications. The registry settings documentation contains Security Note entries with information about security issues.

For information about default registry settings, see URL Moniker Services Registry Settings.

Ports

For information about ports, see ** see Internet Explorer Embedded Security.

See Also

Other Resources

URL Moniker Services
Internet Explorer Embedded Security