How to block internet access with GP

[g1967]

I have a small Windows 2003 server. Our internet connection runs through a router and then to the internet (it does not run through the server), but all the users login to the windows 2004 domain. I want to creat a user id that does not have access to the internet or IM applications (stored locally on the windows xp pro pc's) or mail etc. Basically this will be a local lan id that cannot get to the internet. Can this be done through a policy?

 

[tfg13]

Yes, it can. You will need to have this user in it's own OU, but you can do all that you ask through that OU's group policy.

You may want to look at these scenarios utilizing Group Policy (particularly the Kiosk policy):

http://www.microsoft.com/downloads/...45-8AA6-4775-9208-C681A7043292&displaylang=en

 

[markdmac]

yes, to block IE access to the Internet just configure a new policy with a ficticious proxy address. (only works for IE).

To prevent the user from sending and receiving Internet email check out my FAQ on the subject: faq955-5965

IM is a little more tricky. Configure a policy to prevent the launch of the executable names for the IM packages installed on the PC. It is easy accept users are the tricky ones and seem to find new IM clients all the time.

I hope you find this post helpful.

Regards,

Mark

 

[pinkpanther56]

This might be of interest to you for getting rid of IM clients.

http://www.palmersoft.co.uk/main.asp?content=appkillerlist