Re: Restricting Internet Access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: CHRISTOPHER AHERN (chris.ahern_at_blueyonder.co.uk)
Date: 10/24/04 

Date: Sun, 24 Oct 2004 09:39:22 GMT

Excuse my ignorance but having not worked with group policies much how do
you create this policy.

Chris

"Dave Munday" <thehappymundays@hotmail.com> wrote in message
news:%23rpS%23pZuEHA.3188@TK2MSFTNGP15.phx.gbl...
>I have just implemented a solution on my school network that enables me to
> 'ban' individual students from the Internet whislt still accesing the LAN
>
>
> I created a GPO that only included one option set ; I prevented iexplore
> from running,
>
> I then set the GPO to only apply to one Group of users
>
> Then any user I drop in this group is disallowed access, the message they
> receive is abit messy but it does work
>
> Hope this helps
>
>
> Dave
>
>
> "CHRISTOPHER AHERN" <chris.ahern@blueyonder.co.uk> wrote in message
> news:tGwed.7115$i02.6203@fe1.news.blueyonder.co.uk...
>> Hi All
>>
>> Is there a policy that I can write or apply to prevent access a user from
>> using the internet on an office LAN. All servers and clients are Windows
>> 2000. I need to prevent access from any machine that they might be able
> to
>> log on to, therefore the policy will need to be applicable to the entire
>> domain.
>>
>> If it is not possible to use a script, is there a program I can use?
>>
>> Chris
>>
>>
>
>

Relevant Pages

  • Re: Local Group Policy
    ... Chris S. brought next idea: ... My understanding is that for GPOs, the LSDOu precedence takes effect in an AD. I've been told that there's no need to configure the Local grp. ... The reason given to me is that the Domain or OU policy will takes effect when the client workstation or member server is connected to the AD. ... disconnecting it from the AD and after reboot - this mean that all the ...
    (microsoft.public.windows.group_policy)
  • Re: local admin can join computer to domain
    ... Hi Chris, ... Domain Users Cannot Join Workstation or Server to a Domain ... >> a) you can always disable Add Workstation do domain policy in AD ... >> c) you should have written security policy that will let users know what ...
    (microsoft.public.win2000.security)
  • RE: Running Unmanaged code LogonUser() on a UNC Path
    ... Hi Chris, ... >The assembly is actually located on a file server and not on the local ... >in the Runtime Security Policy section of .NET Framework configuration? ... >Framework Configuration" my assembly with the LogonUser API call in it ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: default domain controller group policy newbie question...
    ... "Chris" wrote in message ... If i want certain users to have more complex password requirements ... than other "normal" users on the domain, where within Group Policy would I ... > grab and process this policy and it applies to all domain-based accounts ...
    (microsoft.public.win2000.active_directory)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)