Discussion Locked

GROUP POLICY

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have been tring to restrict internet explorer from a user. I created and OU and Group Policy with this user in it. I search every option I could find to prevent them from having access .
The only way I could prevent access was to use both DC and workstation settings. Is not Active Directory able to do all this from the Server?

7 replies

by cg it

Should.

I assume that you created an OU and placed this user in that container, then created a GPO with the computer configuration you want, then applied that GPO to the OU. note: Group Policy doesn't automatically take effect. Default refresh for GP is 90 minutes + or - 30 minutes.

by ewgny

Use the group policy setting for proxy settings in the IE connections. Create a "No Internet Policy" that has a bogus IP address for a proxy server. 127.0.0.1 will do fine. Also use group policy to restrict the users ability to change proxy settings so the user can't change it to the actual proxy or gateway.

This discussion is closed to new replies.