Re: How to disable Internet Access or remove Favorite menu and address bar from Windows Explorer

From: Andrew Mitchell (amitchell_at_removecasey.vic.gov.au)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 00:40:49 -0800

"Lisa" <lisa@online.yahoo.ca> said

> Thanks Andy,
>
> I like your Proxy idea, but the risk is that some users can disable it.

Not if you disable the property page using a group policy.
If you open your group policy editor, then browse to 'User
Configuration/Admin Templates/Windows Components/Internet Explorer' you will
see a setting named 'Disable changing proxy settings'
Enable this policy and your users are stuck with what you give them. Use
permissions to filter the users that this is applied to.

> As for IPSec, it will work but then it will be for everyone.

That's sort of correct. It will be for everyone who logs into the computers
you specify to have the policy applied. You can filter which computers will
have the restrictions by only applying the Read and Apply Group Policy
permissions to the computers you want restricted.

Andy

Relevant Pages

  • Re: access denied error when opening gpedit.msc
    ... If you configured Group Policy to prevent users from accessing MMC, ... possible that you did not filter the administrators group assuming you are talking ... If these computers are in an OU other than the domain ... I am logged on with an Administrator account. ...
    (microsoft.public.win2000.security)
  • Re: How to disable Internet Access or remove Favorite menu and address bar from Windows Explorer
    ... I didn't know that you can disable Proxy settings. ... > Not if you disable the property page using a group policy. ... > permissions to filter the users that this is applied to. ... You can filter which computers ...
    (microsoft.public.win2000.group_policy)
  • Re: Customize Start Menu based on Group Membership
    ... inside of OUs such as user and computers - not directly to groups. ... filter a Group Policy via group membership, but that is not the same thing. ... This posting is provided "as is" with no warranties and confers no rights ...
    (microsoft.public.windows.server.active_directory)
  • RE: Deploy SP2 with Active Directory and GPOs?
    ... In a Windows 2000 or Windows 2003 based domain, ... Group Policy is stored as part of Active ... publish programs to users or computers in the Windows 2000 or Windows 2003 ... After the installation files have been prepared, ...
    (microsoft.public.windowsxp.general)
  • Re: Installing Service Packs
    ... NTFS permissions and - in this particular case - Domain Computers Read on ... account objects that need to have SP4 installed into this OU. ... an OU to which a GPO that installs software is linked, ... So, right click the OU, select Properties and go to the Group Policy tab. ...
    (microsoft.public.win2000.group_policy)