Re: Blocking Internet browsing inside terminal sessions.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Using a fake proxy address is a very crude (but effective) way to
stop all IE traffic to the outside. A company as you describe
should really use the proper tool, i.e. a firewall like ISA server.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Gregg Hill" <bogus@xxxxxxxxxxx> wrote on 20 aug 2006 in
microsoft.public.windows.terminal_services:

I did exactly that for some mortgage companies, only to find out
that the "Point" software they use could not contact the
Internet to do loan approval credit checks. I tried making a
hosts file, but that did not work. Normal browsing was killed,
though. I had to revert to letting them have IE and Internet
access.

Gregg Hill



"Infomax" <Infomax@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DACBD8FE-FB1C-41DE-AF1B-8E0AE2674944@xxxxxxxxxxxxxxxx
Thanks Patrick.

As it says in that posting, pointing the proxy setting to
127.0.0.1 did block internet browsing on TS clients without
disabling the whole IE (needed
for internal applications).

Ted

"Patrick Rouse" wrote:

I haven't tried this, but a post here suggests that it can be
done by setting
the proxy address to the loopback IP:

http://www.tek-tips.com/viewthread.cfm?qid=1261848

--
Patrick Rouse
Microsoft MVP - Terminal Server
http://www.sessioncomputing.com


"Infomax" wrote:


Is there anyway to block users from Internet browsing from
TS sessions? We don't want to kill IE, just stop browsing to
outside. We tried using GP,
but couldn't find any policy which can do that.

Any help would be appreciated!
Ted
.



Relevant Pages

  • Re: Prevent user internet access on terminal server
    ... because if the proxy policy is applied to the ... How can I prevent my users from surfing the Internet in their TS ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Prevent user internet access on terminal server
    ... The proxy policy sets the proxy server address in internet ... explorer so they "can" use the internet on their computers. ... their sessions on the terminal server to browse the internet. ...
    (microsoft.public.windows.terminal_services)
  • Proxy configuration ignored
    ... I have a Terminal Server 2003 in a thinclient environment and want it's ... Internet Explorer to prompt for proxy authentication on the Terminal ... the terminal server it completely bypasses the proxy settings and goes ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Public Terminal server in DMZ zone.
    ... inbound connection isa server 2000 to terminal server windows 2003 in dmz ... - internet ... - proxy to terminal server ...
    (microsoft.public.isa.publishing)
  • RE: FTP Solution
    ... important thing to note is that WinInet FTP APIs do not work if Internet ... access is accomplished via CERN type proxy. ... WinInet API or add the "Proxy-Connection: ... Using FTP WinInet APIs in Visual Basic with SimpleFtp and how to enumerate ...
    (microsoft.public.vb.enterprise)