enable internet for admin only?

[wvgirl64]

I am configuring a pc to go to one of our remote sites. I want only the local administrator acct to be able to access the internet. I have set security as such on the iexplore.exe file, and that works fine to prevent other users launching IE from the desktop. HOwever, if that user goes into My Network Places and types

http://www.anything

in the address line, poof, Internet!
This pc is part of the domain and will have users logged into the domain, but I only want someone logged on with the local administrator acct to be able to access the net.
Anyone know how to do this?

 

[bracadar]

You can set up a GPO that will block everyone from the internet except the Admin account. Just create it in a MMC snapin and apply it to the appropriate users or groups.

 

[wvgirl64]

Okay, I will try that - I just want to do it for certain computers though. I can put them in an OU and apply to that OU?
Also, I have been wanting to experiment with group policy but have been told since all my domain controllers are here at corporate and I have none at my remote sites, that I will run into trouble trying to apply those policies. Anyone have feedback on that?

 

[bracadar]

You are right about having some adverse reactions. Be sure you know all the security settings that are in place before you change anything. It will help you greatly to have that documented. You can set the GPO for computers or users. You will have to filter if you use a group. You'll get it! Let me know how it goes.