Disable internet access for accounts in Windows 2000 GPO

[Bwintech]

Hi

I want to create a GPO for certain users and restrict them from accessing the internet. I have looked through the polocies and can only locate restricting levels of access and IE options but I want to restrict any internet access for this GPO. Can I deny access to the DNS servers maybe?

Thank you kindly for your help.

regards,
Brett

 

[ashpp]

I find the best way is to set the proxy details to a non-existant local domain name or the local intranet server.

You could also setup IE as one of the programs you are not allow to run in the "Don't Run Specified Windows Applications" in the GPO.

HTH

Ash.

 

[roar349]

I'm having a similar problem, have created a GPO with "Don't run specified Windows Applications", but users can still access the web through Windows Explorer. Any ideas?

 

[LoopyLoo]

Can you get access to the firewall to deny them there?

 

[roar349]

Too cheap to put one in.

 

[NickS]

Do you have more than one segment on your network?