Re: Unable to block internet access through GPO by using a proxy

Howdie!



"BeckyBoo123" wrote:
I have been trying to block internet access to a few certain users by
setting up a GPO which uses a proxy to block access to the net.
I read in several places that this was the bext way to do it.

It certainly isn't. Setting the proxy address only catches IE - other browsers, applications and stuff can use the configuration the LAN-Connection has configured.

So, I created a new GPO called "No intenet" amongst other things, I set the
proxy settings to 127.0.0.1 and then appled the ploicy to the users in
question.
All of my plicy has taken effect, I can see everything in place. It even
displays the proxy that I put in.
However, when I attempt to browse it still allows internat access even
though the proxy is in place.

The policy is applied to the users? Can you confirm with gpresult and rsop.msc?

Apart from that - to really make sure the internet access is blocked, check for a firewall/proxy implementation that is capable of using AD as a base. ISA and Squid can do that - there are also others (free). Blocking access on the clients is bad design. You're configuring file access on the shares on the servers - not at the clients, right? You should do that with the internet access, too.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

.

Relevant Pages

  • Re: caching special kind of Web request
    ... [http proxy? ... You can run squid in transparent mode, ... No client configuration needed. ... running a proxy with a few clients and checking squid access logs ...
    (comp.os.linux.networking)
  • Re: Proxy for external users
    ... Maybe another proxy only ... Seems a much better configuration would be a VPN, ... Then you could control them exactly like ... The routing and remote access snapin for W2K is ...
    (microsoft.public.isa)
  • Re: Internet Access problem in Fedora Core 4
    ... was done to see if my DNS was misconfigured. ... I tried putting the proxy address as a value to nameserver, ... I then checked if my browser proxy configuration was set to direct ... PING 64.233.179.99 56bytes of data. ...
    (linux.redhat)
  • Re: Internet Access problem in Fedora Core 4
    ... was done to see if my DNS was misconfigured. ... I tried putting the proxy address as a value to nameserver, ... I then checked if my browser proxy configuration was set to direct ... PING 64.233.179.99 56bytes of data. ...
    (linux.redhat)
  • Re: Internet Access problems in Fedora Core 4
    ... was done to see if my DNS was misconfigured. ... I tried putting the proxy address as a value to nameserver, ... I then checked if my browser proxy configuration was set to direct ... PING 64.233.179.99 56bytes of data. ...
    (comp.os.linux.misc)
Loading