Re: internet and hyperlink restrictions in GPO

Tech-Archive recommends: Speed Up your PC by fixing your registry

On Wed, 26 Mar 2008 05:29:01 -0700, max
<max@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hi i have allready posted this issue but lost it somewhere.

Situation:

I have configured a sbs 2003 premium R2 with SP1 server
Created different OU?s
Every OU has it?s own policy
They all inherit from the main domain Policy.


Policylevels are high
I work with redirected desktops.and documents
Rightclick, Editing, Write ,Slide , Control panel, taskmanager, CTRL-ALT-DEL
, etc? are disabled
A lot of functions and settings that can be changed as a restricted user are
disabled

Some users have access to office word or outlook
Other not
Some users may access the internet
Other not
Some user may send/receive emails ( 25 and 110) and at the same time not
accessing the internet ( 80)


Here are my questions

How can I configure at GPO that some OU may access the internet and other
OU? s not and still be able to send/receive email with pop and smtp
Do I have to configure a non-existing proxy ?

How can I prevent some OU to create or execute Hyperlinks in Word or outlook?
Because when I tried to create a link like ? C:\? in MSWord with a
restricted useaccount and ctrl-click it , I can access windows explorer,
policy does not allow me to change or delete, but I would like to prevent the
opening of windows explorer.
Possible or not ?


I hope this little story is understandable. Sorry for my poor grammar.


Thank you in advance


If you have Premium then you should have install ISA 2004. I would not
let any user have 110 or 25 abilities. Use Exchange to collect and
send email. You can block those ports from the clients in ISA 2004. Is
there any reason why you are still using client based pop collection?

You can also restrict internet use by removing users from the internet
users group.
See what SBS support is working on
http://blogs.technet.com/sbs/default.aspx
Check your SBS with the SBS Best Practices Analyzer
http://blogs.technet.com/sbs/archive/tags/BPA/default.aspx
.

Relevant Pages

  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Applied Group Policy Objects ... Small Business Server Internet Connection Firewall ... Secure Proxy Server: 0.0.0.0:80 ... Import the current Content Ratings Settings: ...
    (Security-Basics)
  • RE: Group Policy - Restrict Internet Access by OU?
    ... access internet through policy. ... please note that it is not possible to restrict ... Web Proxy "poisoning", with company intranet site as expectation to use ...
    (microsoft.public.windows.server.sbs)
  • Re: Locking down computers
    ... The updated policy is a must, but you need to get that app fixed, too. ... Take a look at the Internet Storm Center's time to live numbers. ... words that managers can understand, you aren't doing what you need to. ... Messenger, tho a PITA, can be a business asset. ...
    (comp.security.misc)
  • Re: Remote users unable to connect to internet outside of network
    ... When users leave the network and try and connect to the ... internet from home or hotel room they are unable to connect to the ... Addresses of your DCs you must disable the policy on your mobile ... Keep a back up of your OE settings and folders ...
    (microsoft.public.windows.server.dns)
  • Matthew Shears Appointed as ISOCS Director of Public Policy
    ... advocate for the core values of an open and accessible Internet. ... Matthew will drive ISOC's policy ... ISOC moves forward to develop new approaches to help policy makers ...
    (comp.dcom.telecom)