Security

Ask something
Discussion Locked

Requiring a logon to access Internet

0 helpful
5 replies

by bkduke 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We would like to find some method in IE 5.0 to require a NT domain login before users can access the Internet. A registry hack requires local users to logon to the network.

However remote users are not required to logon to allow them to work offline. These remote users can access the Internet without logging onto the network.

We used to enforce a network logon using Microsoft's Proxy Server. However it required Internet application, browser or winsock changes that were difficult to maintain in addition to it masking the identity of the user in our firewall and web filter logs. Proxy Server is not an option because of it.

We would like something that was transparent to the user.

5 replies

by erikdr

Dunno why you choose
" remote users are not required to logon to allow them to work offline". In our organisation, with 1000's of NT notebooks, these too are required to logon. In case of being offline, of course with the nasty NT error message and'cached credentials' - but with some user training this proved no problem. After this, indeed IE usage is nicely restricted...

Hope this helps,

- The Netherlands

by bkduke

Let me clarify the term "remote users". We maintain an international network with hundreds of very small field offices. Even with all the network redundancy we can build in at a reasonable cost, there will be times where access to a PDC or BDC cannot be totally assured. Management has brought up the case where remote users such as this MUST maintain web access to the internal systems they can still get to. We just don't want them to be able to access the Internet without properly identifying themselves.

by shanghai sam

You want a method, within IE 5.0, to force an NT domain logon before access to the big bad Internet.

However, you dont want to:
-Change application settings
-Change TCP/IP settings
-Use a proxy server

How can you say use it (change IE settings) an not use (change application settings)? You can have your cake and eat it too.

So you want remote users and local users to do a domain logon before access is granted to the Internet?

Local user must do an NT domain logon.

Remote users are note required to do do an NT domain logon.

All you have left to work with is no proxy and be transparent.

This leaves packet filtering. You could put local and remote users on different IP networks. And possibly different domains. Eachdomain applies different settings via policies. TCP/IP settings can be applied by DHCP.

I remember one proxy server I worked with we implemnted an NT group where permission was determined for Internet access.

You could write a new browser with this particular function using the IE engine. This was another option we were seriously considering.

This discussion is closed to new replies.