Re: Stop users from Downloading...

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 06:19:22 -0400

You can not really stop users from downloading files on the Internet short
of denying them access to the Internet. There are a couple of ways to do
this using Group Policy. The users can not get around this - no matter how
smart they might think they are. This may not be what you want to do. You
could allow them access to certain web sites and no where else. That would
be, as the other poster stated, more of a Firewall / ISA level solution.
This may also not work for your environment. The users could not get around
this, either. You can, however, prevent users from running certain
executables. This is also a Group Policy thing. The smarter users might be
able to get around this by simply changing the name of the .exe file.

Removing the domain user account object from the computer's local
Administrators group is almost always a good thing. I typically do not
allow the 'regular user' to have this situation. I have far too many horror
stories when this situation was allowed. Setting up the domain user account
to be a member of the computer's local Power User group is usually a better
solution as the users will still be able to add printers ( so, if you do not
want this then it would be a bad solution! ) and install some software.
This should prevent most applications from installing in the first case.
All those problematic applications that the users seem to love ( Hotbar,
AIM, etc. ) typically require that the user account being used have
administrative privs to the local computer account and the Power User
membership does not usually fulfill that requirement....usually!

HTH,

Cary

"Al" <anonymous@discussions.microsoft.com> wrote in message
news:ADA987D8-EAEC-4480-A784-DF204FF4362C@microsoft.com...
> Is there a policy that can stop users from downloading??

Relevant Pages

  • Re: lock user to access the Internet
    ... There are several ways to control who can get to the internet and who cant. ... Another way is to create a group policy that inputs a fake proxy address ... > User group could access the Internet from his user account. ...
    (microsoft.public.win2000.group_policy)
  • Re: Access denied to Control Panel applets!
    ... You could also try running gpresult /z to get ... track it down if it is Group Policy related but it is not real user friendly ... it reports his user account in the OU you expect and compare his gpresult ... that much - nothing for the control panel etc... ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Testing email
    ... Internet Connection wizard -> Connect to the internet) to configure mail ... Click Start, click Server Management. ... pop3 server information, user account, mailbox type and so on. ... the issue and send the log files to me: ...
    (microsoft.public.exchange.admin)
  • RE: Restrict logon hours
    ... Change Logon Times for a User Account ... Edit the user account properties by using the net user command. ... Enforce Logon Time Restrictions Using Group Policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Testing email
    ... Internet Connection wizard -> Connect to the internet) to configure mail ... Click Start, click Server Management. ... pop3 server information, user account, mailbox type and so on. ... the issue and send the log files to me: ...
    (microsoft.public.exchange.admin)
Loading