this is for a PC running XP SP2
with Internet connection, but not on a LAN...

having switched to Firefox for general web use
I'd like to restrict IE to a limited number of sites -
at the moment just the "Windows Update" and "Office Update"
sites - which need to play with Active-X controls

first thought is -
in the IE Security settings - set all of the zones to "High"

add those sites to which I want to allow access,
into the "Trusted Sites" zone - set that to to "High"
then allow prompted Active-X in that zone

hmmm
that seems too easy :|

am I forgetting something ?

is there a decent tutorial on the subject ?