Re: Internet access

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello Bruno,

And still one little more step is necessary, I forgot.
Go to:
User configuration>AdministrativeTemplates>Windows components>Internet Explorer>Internet Control Panel
On the right side is the Policy: "Disable the Connections page" ENABLE this policy
Otherwise the user itself can kick out the proxy settings and browse again.

And of course, if you have an option for an ISA server, it's more better.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.



"myweb" <meiweb@xxxxxx> wrote in message
news:59710d10b6d8c8af8d314b3a70@xxxxxxxxxxxxxxxxxxxxxxx

Hello Bruno,

In AD create a user group, NOInternet. Add the accounts that should
not got access to the Internet to the group.

Create a Group policy in the OU where the users are:

OU>Properties>Group Policy>New>name it NOInternet and open it
go to
User configuration>windows settings>Internet Explorer
maintenance>connections
at the right pane you have Proxy settings. Enable it and set it to an
IP
address from your internal network which is NOT used.
At the top of the policy NOInternet[servername.domain] open the
properties, go to Security tab, Add your new created group NOInternet
and apply this policy for them. Have a look that it only applies to
the NOInternet Group.

So only this users will get a Proxy server which doesn't exist. They
never will get an answer and can't browse. No matter on which
workstation they log in.

No way to get it working.
I tried several times your suggested setup and I'm sure
I've followed it exactly.
I wasn't able to get the client inhibited from accessing
the Internet.
I tried to log in from the client side both on the computer and the
domain but nothing happens.
Are you sure you don't foget to tell me a part of the story?

Ciao
Bruno


.

Relevant Pages

  • Group Policy Connundrum - Stick with it, its confusing!!!
    ... I have created a policy named no internet. ... I have also created some exceptions for this policy, which do not use the proxy, i.e. ... Then by setting the 'Admin Template> Windows Components> Internet Explorer> Disable Changing Proxy Settings' to enabled effectively grays out the proxy settings in internet explorer and stops the user from altering the settings. ...
    (Security-Basics)
  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Applied Group Policy Objects ... Small Business Server Internet Connection Firewall ... Secure Proxy Server: 0.0.0.0:80 ... Import the current Content Ratings Settings: ...
    (Security-Basics)
  • Re: Internet access
    ... Add the accounts that should not got access to the Internet to the group. ... At the top of the policy NOInternet[servername.domain] open the properties, go to Security tab, Add your new created group NOInternet and apply this policy for them. ... some Clients are allowed to use Internet, some other are not, ...
    (microsoft.public.windows.server.networking)
  • Re: How to Enforce internet access through proxy setting only
    ... I am trying to restrict internet access on mobile user (laptop ... Try using the policy editor ... then to stop users changing settings within IE navigate to ... "Prevents users from changing proxy settings. ...
    (microsoft.public.windowsxp.general)
  • Re: Locking down computers
    ... The updated policy is a must, but you need to get that app fixed, too. ... Take a look at the Internet Storm Center's time to live numbers. ... words that managers can understand, you aren't doing what you need to. ... Messenger, tho a PITA, can be a business asset. ...
    (comp.security.misc)