Windows 2003 Administration

[vaikz11]

hi,

is there a way to control the domain user from accessing the internet on a speceific time? Let say, granting them access after working ours?

Thanks in advance.. Very Happy

 

[beltmanjr]

Without having AD in front of me I'd suggest thinking about the group that enables the user to access the internet. When using a proxy server you probably have groups set up to access the net. Perhaps the time restriction (login time restriction) can be set on these groups?

 

[ForumKB]

couldn't this limit the log in times for the users that were part of the groups to the network also (never tried it but just thinking about the least permisive permissions taking precident)? Do not have AD in front of me either but could see this causing a problem.

If you are using ISA server I believe (again don't have it in front of me and it's been a while) you can set schedules up for the access rules. i.e. you can deny all access to the internet through a rule for the domain users (bearing in mind this will apply to everyone inc. admins unless you set another rule to overide it or set up a special group instead) but only schedual the rule to be inforced 9-5 monday to friday.



"Back it up before you do anything or it will all end in tears . . ."

Adrian Paris

Paris Engineering Ltd

http://www.ForumKB.com

- Tech forum dedicated Google search, find answers faster by not searching the junk.

 

[vaikz11]

Actually where not using a proxy or ISA Server. Its only as Windows 2003 R2 Enterprise Standard server. Been looking on AD but cant find anything about this. I was thinking if this is possible in using script.