Re: block user from accessing Internet

I'm thinking that if you remove him from the local administrators group, he
shouldn't be able to disable the firewall clients. Not 100% sure about
this.

--
Merv Porter [SBS-MVP]
============================


"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:eXM$wZxTHHA.4260@xxxxxxxxxxxxxxxxxxxxxxx
In our environment, user is very easy to disable ISA client (right-click
on the ISA client icon in System Tray and select disable). How can I stop
the user from disable it?

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:O$Z6YNxTHHA.3500@xxxxxxxxxxxxxxxxxxxxxxx
Unless the user is somehow disabling or uninstalling the firewall client,
removing him from the Backoffice Internet Users group should be enough.
I'm assuming that the workstation is joined to the SBS domain and is not
in a workgroup. Also assuming that you have 2 network adapters in the
SBS 2000 server so that ISA 2000 can run in firewall mode.

Re-run ICW and see if that makes a difference.

--
Merv Porter [SBS-MVP]
============================

"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:eXGUiWwTHHA.4260@xxxxxxxxxxxxxxxxxxxxxxx
Hi Merv,
Thanks for the correction. But the user still can access Internet!!!
What should I check in ISA? Are there anysways for users to work-around
the BackOffice Internet Users permission?

el

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:e61wvXqTHHA.1000@xxxxxxxxxxxxxxxxxxxxxxx
The correct way to restrict users is the way you've done: remove them
from the BackOffice Internet Users group.

The ISA firewall client on the workstation is required so that the
client correctly interacts with ISA 2000 on the server. Restricting
the user by not making them a member of the local administrator group
on the computer will also restrict their ability to install/uninstall
programs.

--
Merv Porter [SBS-MVP]
============================

"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:OCrrPBlTHHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
Hi Merv,

Is creating a Site and Content Rules in ISA server the correct way to
block Internet access?

Could you explain to me why the workstation needs to have ISA client
running and the user could not have local administrator permissions?

TIA,
el
"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:elZ%23b8jTHHA.920@xxxxxxxxxxxxxxxxxxxxxxx
Assuming ISA 2000 is installed properly and working correctly, that's
the correct way to block internet access for your users.

Also, make sure the ISA client is running on the workstations. Also
makes sure he does not have local administrator permissions on his
workstation.

--
Merv Porter [SBS-MVP]
============================

"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:ON4nIuhTHHA.1000@xxxxxxxxxxxxxxxxxxxxxxx
Hi all,
I had tried to remove a user from the BackOffice Internet Users
security group to stop him from access Internet but he still could go
to the Internet. Had I done the wrong way? Are there any other ways to
stop him?

Thanks,
el







.

Relevant Pages

  • Re: block user from accessing Internet
    ... Merv Porter [SBS-MVP] ... client, removing him from the Backoffice Internet Users group should be enough. ... Also assuming that you have 2 network adapters in the SBS 2000 server so that ISA 2000 can run in firewall mode. ... Are there anysways for users to work-around the BackOffice Internet Users permission? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: block user from accessing Internet
    ... Automating the Configuration of the Firewall Client: ... Merv Porter [SBS-MVP] ... on the ISA client icon in System Tray and select disable). ... work-around the BackOffice Internet Users permission? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: block user from accessing Internet
    ... Unless the user is somehow disabling or uninstalling the firewall client, ... removing him from the Backoffice Internet Users group should be enough. ... What should I check in ISA? ... The ISA firewall client on the workstation is required so that the client ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Internet access with local PPP links
    ... Extract all files to a folder on ISA server ... This newsgroup only focuses on SBS technical issues. ... if I disable the ISA client but leave IE setup to use the ... | server at port 8080 then the user can still surf the Internet fine. ...
    (microsoft.public.windows.server.sbs)
  • Re: Is this a 3-Leg Perimeter scenario?
    ... the same configuration as I had it originally before upgrading to ISA 2004 ... No PersisentRoute enrty on the clients; no firewall client disabling; no IE ... using IE to access the FTP. ...
    (microsoft.public.windows.server.sbs)
Loading