Windows Forum

Ask something
Discussion Locked

controlling internet access via GPO's

0 helpful
7 replies

by loketar

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Anyone have reccomendations for controlling group internet access via windows 2k AD gpo's. Looking for some innovative ideas...Thanks in advance...

7 replies

by ewgny

To prohibit access for a group, apply a GPO that contains a bogus proxy address. Also in that GP restrict the user from being able to change their proxy address. To prohibit by specific computers, you can use the same strategy, only with group policy loopback to apply the GP to the computer instead of the user.

by loketar

Thanks for your input. Had already thought of this one. am using it in a mixed novell environment with success but there are issues with AD GPO's.

by d.walker5

There is no sure fire way to prevent users from viewing any site. Third party programs are somewhat effective, but there are just to many ways arround them. The MMC add in Group Policy, User, Adminitrative files also offers some limited help. I haveused the Microsoft IAS server with great sucess, however this is costly. I have advised many clients to notify all employees their broswing habits are being logged and non-business use could result in dismissal. If you have a legal department, I advise letting the attorneys develope the statement. This is very effective with most, there are always some who will challenge you, than you have to act or everything goes. I have one client now fighting a sexual hasserment suit. The IAS server is cheaper--even if you win.

by loketar

Thanks for your input. I agree there is no sure fire way to stop access. I am working for a k-12 district so internet access is a real big issue. Unfortunatley, funding is the hurdle here. Am considering using an open source solution forproxying at each school as the MS solutions are just simply to spendy. Have any suggestions for proxying. thanks

This discussion is closed to new replies.