Restrict Internet Access USing Group Policy

[ADW2005]

Is there a way to do this completely with GP?

Basically I want to set up an OU within AD and add those users who cannot be trusted with the internet?

Is there one specific policy that I can do this with or is it a combination of a few?

Tony

Incidentally I have no proxy - we use a Cisco PIX.

 

[Rastor5]

In the group policy editor for your "restricted" OU, go to the Proxy Server location and enter in 127.0.0.1 and the computers or users assigned to that OU will continually be looking at their local computer for a proxy server that doesn't exist.

in the Group Policy editor go to

User Configuration>Windows Settings>Internet Explorer Main>Connection>Proxy Settings


I don't know if this works with any other browser than IE installed so you may need to test that one out if you use Firefox, Netscape or others....It works for IE, as a net admin for a public school I get students all the time that are "banned" from the Internet for one thing or another and this way I just move their user account to my "restricted" OU.

 

[bazzert]

I've done something similar only created a group with a dummy proxy (caled banned). Then rather than moving users to a differnt OU I just make them members of that group as well as the usual. This saves moving users from their OU, useful if you've got pupils sorted by year group.