RE: Help .........Win2k3 user accounts and internet control
- From: Rob Commarota <RobCommarota@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 23 Jun 2006 03:55:02 -0700
This is the soultion we use:
1) Create a group called BlockInternetAccess or something else that makes
sense.
2) Create a group policy that locks down the IE settings so that users
cannot access/change them.
3) On that same policy configure a proxy server that does not exist such as
NOPROXY.Company.com.
4) If you want to allow access to certain sites such as the intranet or
local web-based applications, include these in the exception list.
5) Filter the policy so that it applies only to the security group you
created in step 1.
6) Apply the policy to the domain or to the OU that houses all of your user
accounts and make sure it is enabled.
7) Add users that need Internet access blocked to the group you created in
step 1. At my site, we modified the home page for this policy (and added a
proxy exception so that it would work) that explains Internet access has been
blocked.
Caveats - This only works for IE and if you allow users to install other
browsers, they will easily bypass it. We did have some users with local
admin rights (some programs just require it) that needed Internet access
blocked, so we also configured the "Don't run specified windows applications"
policy to include netscape.exe, firefox.exe, etc. Of course, a really
resourceful user might just rename the exe file to get around that....not
sure if those programs run if the exe is renamed, but we haven't had anyone
try yet.
Rob
"admin@xxxxxxxxxxxxxxxxxx" wrote:
Hi all,.
I hope you maybe able to help this newbie to Win2k3 server gain some
control over users internet use.
My setup, 1 x win2k3( 2 NIC), with AD and DC running, 3 x win xp pro
workstations, 1 x Win2k pro workstation, 2 x Win XP pro laptops. 8 user
accounts.
What I am trying to acheive from the win2k3 box is similar type of
control to access time to the internet as to the other network resource
control. I have full time control through network logon to the at
present to all users to file and print sharing over the LAN. I would
like now to include the internet as a network resource which, the
permissions for access to the internet are controlled through the
individual user accounts, as for the F&P sharing over the LAN.
Is this possible within the standard Win2k3 server setup, or is a third
party application required?
I see that Windows vista parental control provides this functionality,
however this would need to be installed locally on all of the WinXP
machines and not controlled by the server.
If I have posted this to the wrong group, please accept my apologies,
and if possible advise where to post my query.
Thanks in advance for any tips or solutions.
- Follow-Ups:
- References:
- Prev by Date: Help .........Win2k3 user accounts and internet control
- Next by Date: Re: Help .........Win2k3 user accounts and internet control
- Previous by thread: Help .........Win2k3 user accounts and internet control
- Next by thread: Re: Help .........Win2k3 user accounts and internet control
- Index(es):
Relevant Pages
|
