Block Internet access for a certain user

[MockY]

I'm running both a Terminal Server and a Domain Controller (2 separate servers) and I want to block internet access for one single user but I still want that user to be able to access the LAN like before. How do I go about to do this if the Firewall is not an option?

 

[bloomlight]

SEE thread931-1440628

You may find answer there.

 

[Spirit]

does the user use TS or a desktop?

You may have to create a new gpo which sets the Default Gateway to "False" and apply it to an OU create specifically for the numpty!

Good luck.

Iain

 

[MockY]

I ended up doing this:

In IE7, I pointed to a non existing proxy server, removed the tab where those setting resides so it can't be reseted by the user, denied read access to messenger.exe as well as Firefox.exe. Problem solved.