deny Internet access to selected individ

System policies, only allow specified Windows programs, and exclude web browsers from the allowed list?

It seems to me you should be able to accomplish this via a logon script. Perhaps the script that runs for the authorized users could autolog them onto the Proxy Server.

Another approach could be to use a Kixtart script to enable or disable the ProxyEnable key in the registry.

I know this isn't a definitive answer but maybe gives you some directions to pursue.

paul

This may not be the best answer, but I think you can do it via DHCP server, by assigning a fix ip address to the said user and remove the gateway /router key assignment to this user.

The down side is that this effective only when the user is using the same computer and not able to access multiple computers.

I use Proxy2 for this, I have 3 groups set up on the domain

web access - for just browser access
full access - allows the use of ftp client and msn messenger
unrestricted - yes, you guessed it :)

if a user is not in any of the 3 groups, theywill get a user/pass box from proxy, if they are in goups, then the proxy just allows the access.

i think you should use the separate IP address for your lients and specify them user name and password ( to individual one).Then evry one can logon your server.
If you use the proxy server then assign all the clients of your network the same proxyas your administrator server have.

What browser are you using? If you are using IE you don't need to have your users logon. From your default website under IIS you select use NT challenge and response. This will eliminate the need for your users to logon unless they use a different browser (Netscape) Once that is set you can deny those specific users access to the internet and no one else would ever know it was happening in the background.

With Proxy Server 2.0 it will always check the NT user name and password for validation before promting them for another password. As long as you assign them permission on the proxy server - they will never be promted for a user name and password.You can also set users to only have specific access on the internet - i.e. FTP access only (can't surf but can send FTP files).

Play around with proxy server and I'll bet it's just what you're looking for.

p.s. you should always assign your servers to static IP addressed - but this has nothing to do with getting prompted for a password when accessing the proxy server...