How to use GP to stop a user from accessing Internet

[Larsson]

Hi!
I have a user who uses the Internet to much, she doesn't need the internet with the work she does.
So I want to stop hers access to Internet.
Is it possible?

Thanks for all help, Larsson

 

[lck092580]

if(u're using ISA)
then I'd know how to stop it with software
else // u're not
go over and start yelling @ her.

 

[1sexypapi]

does she need network access ??? if not disable her nic or unplug it, do you have a firewall?? if so block her IP from going out, remove her gateway settings from her TCP/IP settings rename iexplore.exe so that the browser wont launch if your using a proxy server change the proxy port, or easiest is to set a security policy on that user or computer

 

[Larsson]

We are running a Terminal server so she need access to the server, but not the Internet.

 

[jpeachman]

An easy solution would be to set this user's account to use a proxy server for internet connections, and set the proxy address to 0.0.0.0. You can tell IE to bypass the proxy server for local addresses. You can set this through Internet Options | Connections | LAN Settings, or directly in the registry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings, "ProxyEnable"=dword:00000001, "ProxyServer"="ftp=0.0.0.0:80;gopher=0.0.0.0:80;http=0.0.0.0:80;https=0.0.0.0:80"
and
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel, "Proxy"=dword:00000001

Note that this is a per user setting, so if she uses more than one account, it'll have to be set for each. If you're concerned that the user may be able to "fix" this (or may call in someone who can), you can restrict her access to Internet Options with:

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions, "NoBrowserOptions"=dword:00000001

Alternatively, you can enable Content Advisor and set a ratings policy that won't let her see anything! There's a MS Knowledgebase article on this: "How to Configure Internet Explorer 5.x to Block Access to All But Approved Internet Sites (Q267930)."

Joe

 

[Larsson]

Okej, thanks.

 

[Larsson]

I have removed most icons from the desktop, she cannot open windows explorer and there is no programs on the start menu.
The only icons on the desktop are for the programs that she uses and “My computer”. And there is the problem, but I figured that if I removed the address bar from the window, then she cannot surf.
Shall test this today.

Larsson

 

[lck092580]

Did u try disabling right click?.. Cuz if you don't then it'll only take her a matter of minutes to restore all the icons that u've deleted by right clicking.. create shortcut.. browse.. and so on.

 

[Larsson]

Yes I did.

 

[jpeachman]

Does she have email? Can she gain access by clicking a link in her email program? How about Word--try typing and clicking a URL there. There are lots of ways to get internet access without icons, but if you proxy her access (you don't set up a real proxy server, just set it to a null address in IE) or use content advisor, it will work for all programs that use the IE engine, which includes everything that ships with Windows and Office, as well as many third-party programs. Of course, if you have any software that doesn't rely on IE, you'll have to disable it separately. Kinda depends on just how persistent she is about trying to go online, and how serious you are about trying to stop her!

Joe

 

[lck092580]

Good call Joe.. i almost forgot about MS office and how it uses the IE engine.. good thing we have ISA @ the office.. we have total control of what goes out/in && || who gets to send/recieve.. so much power...

Good luck larsson..

 

[Larsson]

Well, I don't know how much she knows about computers, but I don't think she knows about the "other" ways to access the Internet.
So I will see how this turns out.

It should be an easy way to block Internet access; I don't think that it's only my company that has these problems.

Larsson