Re: Block internet access by new access rule not working?

Toto,

You shouldn't have to do anything more than remove the user from the "sbs
internet users" group.
There shouldn't be any need to create a deny rule.

I'd recommend that you rerun the SBS 'connect to internet' wizard to reset
ISA's rules and disable any extra rules that you have created. Remove the
nominated user from the "sbs internet users" group in active directory. Then
monitor the live log to see if they still have access. If they have, you
should see which rule is allowing access and we can figure out why.

Cheers,
ahl


"Toto Sanderson" <TotoSanderson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A1DC0B35-9F3F-424E-8621-0B5D39ABC51F@xxxxxxxxxxxxxxxx
Hi, we have SBS 2003 Pre and ISA 2004 on the server.

I learned on this forum how to block internet access for one user during
on
ISA. However it does not work. Here is the settings:

New access rule -> Deny -> All outbound traffic -> From 'Internal' to
'External' -> User is a new set which includes the user I want to block

I also tried to set outbound traffic to HTTP, HTTPS. But after applying
the
rule and Firewall policy, the user can still access internet and browse
websites.

Please somebody can tell me what setting is wrong or how should I do it
properly?

ps, I have also read Phillip Windell's recommended links in his signature.
I'm still new to ISA, please help with more detailed procedure.

Thanks!

Toto


.

Relevant Pages

  • RE: Is there a way to public the fax printer in SBS to the interne
    ... I can only give you some general documents about RPC over HTTP and Fax ... Microsoft Exchange Server 2003 RPC over HTTP Deployment Scenarios ... This newsgroup only focuses on SBS technical issues. ... |> Internet Printer will provide an interface based on HTTP, ...
    (microsoft.public.windows.server.sbs)
  • Re: Blocking website?
    ... Yup, I can't get to that page either, and I am not even behind a SBS server ... >> To check your connection settings, click the Tools menu, and then click ... >> Internet service provider. ... >> See if your Internet connection settings are being detected. ...
    (microsoft.public.windows.server.sbs)
  • Re: Client Internet Access Problems
    ... I tried changing the settings but it did not work. ... On SBS 4.5 there was a flag to allow internet access for each user. ... set up a WinXP Pro machine and see if that connects to the Internet. ... Ethernet adapter Server Local Area Connection: ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW not accessible over web
    ... Can you access RWW from SBS itself thru http://localhost/remote/? ... Click the "Connect to the Internet" link. ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Client Internet Access Problems
    ... the user would need to be a member of the Internet Users security ... Merv Porter [SBS MVP] ... I tried changing the settings but it did not work. ... IPCONFIG from Server: ...
    (microsoft.public.windows.server.sbs)