Diabling internet access

[mydogbites]

Hey there i want to disable the internet access to certain groups of users but allow them access onto there outlook e-mails on our local server, via IE still, is there a way in the policies i can this?

Any advice would be great

Cheers

James

 

[porkchopexpress]

You could set a null proxy address using group policy.

You know what Jack Burton always says at a time like this...

 

[pgaliardo]

Best bet is probably setting up a proxy server, then assigning groups the appropriate Internet Access. We use ISA 2004 to do this exactly.

 

[markdmac]

Yes, set a fake proxy server for these users via GPO. They will still be able to access Intranet sites but will fail name resolution for anything outside the network.

ANother option is to actually run a proxy server and redirect them to an internal site of your choosing. You can get a really good and inexpensive proxy server from YoungzSoft.

http://www.youngzsoft.net/ccproxy/index.html

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[pgaliardo]

Aplogies to porkchopexpress - must have posted my reply just as you were posting.

 

[pgaliardo]

Mark's suggestions will definitley be better on your budget than mine. ISA may be overkill for what you need to accomplish.

 

[ShackDaddy]

Or you could take the route that one of my clients takes and withhold giving out default gateways in DHCP and assign them manually to users who are allowed to go beyond the local router...

I prefer a dummy proxy address in group policy.

 

[markdmac]

Looks like we all jumped on this one at the same time.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[porkchopexpress]

Better to have more info than required than too little ;-)

You know what Jack Burton always says at a time like this...

 

[mydogbites]

cheers guys for the advice guys

Set the proxy to loopback and disallowed it for intanet, it works fine, nice one

P.S Also took away the internet options page so the bastards couldn't get set the proxy back hehe

 

[markdmac]

P.S Also took away the internet options page so the bastards couldn't get set the proxy back hehe

Make sure they can't edit the registry too. Otherwise they can overwrite it.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[porkchopexpress]

Lol contempt for your users, you'll be a BOFH in no time ;-)

You know what Jack Burton always says at a time like this...