Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

GPO

Status
Not open for further replies.

ciscotx

Technical User
Jul 25, 2007
115
US
Is there anyway in Windows Server 2003 to block internet access for a certain user account or group through group policy??? or can anybody suggest on how to address this issue.
 
Create a new GPO and go into User Configuration -> Windows Settings -> Internet Explorer Maintenance -> Connection -> Proxy Settings -> Enable proxy settings -> Address of proxy: 127.0.0.1

Create a group in AD and add the user(s) to the group. Link the GPO to the OU that the user(s) is/are in. Add the group you just created and give them read and apply rights. Remove Authenticated Users. That should work.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
unclerico is correct

however, you must be very careful with IE maintenance policies. for 1, they tattoo the registry, and secondly, the first .pol file to apply will be the ONLY one to apply (this is what IE maintenance settings are applied through). the normal gpo application model does not apply to ie maintenance nodes...

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+

 
Or you could invest in a proxy application e.g. ISA (2nd time I've mentioned that product but I do not get any commission!)

It allows you to do more as well and you can have better regulated access to the internet for the users.
 
ISA is rather costly and had for novices to master. If you can't afford it check out CCPROXY by youngzsoft. I found setup a little strange but it works really well. Mark Minasi from Network World Magazine did a nice review of it. The product is super in expensive.

CCPROXY is just a proxy software, ISA is much more robust and offers application level filtering. Only you can decide what your needs are.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top