Re: Internet access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hello Bruno,

In AD create a user group, NOInternet. Add the accounts that should not got access to the Internet to the group.

Create a Group policy in the OU where the users are:

OU>Properties>Group Policy>New>name it NOInternet and open it
go to
User configuration>windows settings>Internet Explorer maintenance>connections
at the right pane you have Proxy settings. Enable it and set it to an IP address from your internal network which is NOT used.

At the top of the policy NOInternet[servername.domain] open the properties, go to Security tab, Add your new created group NOInternet and apply this policy for them. Have a look that it only applies to the NOInternet Group.

So only this users will get a Proxy server which doesn't exist. They never will get an answer and can't browse. No matter on which workstation they log in.
Only one disadvantage, if they have the possibility to use firefox etc. it will not work.

Test this first with a Testgroup and Testuser in a Test OU, so that you don't got problems in your running system!!!

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.



WinServer 2003 SE SP1
Domain Controller, File Server, DHCP Server
How can I selectively inhibit some Clients from
using Internet services?
I.e.: some Clients are allowed to use Internet, some other are not,
whatever the computer they log in.

I need a very step-by-step expalnation as I'm a
very newbie to this OS.
Bruno



.



Relevant Pages

  • Re: Internet access
    ... In AD create a user group, NOInternet. ... got access to the Internet to the group. ... at the right pane you have Proxy settings. ... At the top of the policy NOInternetopen the ...
    (microsoft.public.windows.server.networking)
  • Re: DNS on w2k - Internal Only
    ... You need for DNS to do all resolution for all clients even if the client ... does not have internet access. ... Group Policy tab, New, name the Policy then select Edit. ... Connection then double click Proxy Settings. ...
    (microsoft.public.win2000.dns)
  • Re: Certificate-based DHCP authentication
    ... access to Internet from clients that are not members of domain... ... > - another option would be to build IPSec policy. ...
    (microsoft.public.windows.server.security)
  • Re: Internet access
    ... Have you updated the policy at your domaincontroller? ... In AD create a user group, NOInternet. ... not got access to the Internet to the group. ...
    (microsoft.public.windows.server.networking)
  • Re: Internet access
    ... On the right side is the Policy: "Disable the Connections page" ENABLE this policy ... Otherwise the user itself can kick out the proxy settings and browse again. ... In AD create a user group, NOInternet. ... not got access to the Internet to the group. ...
    (microsoft.public.windows.server.networking)