Windows Forum

Ask something
Discussion Locked

Restricted Internet Access

0 helpful
8 replies

by mark neller

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a customer that requires that all users have access to a defined list of Internet sites, whilst a group of users has unrestricted access to the Internet. The customer is using IE4.01sp1 and Proxy 2.

Proxy 2 provides this functionality seperately, but not concurrently. I have thought of using a registry hack in the logon script to modify the proxy server that the user (or group of users) points to, however the registry does not appear to hold all of the information.

If I was to point the restricted users'workstations to a certain proxy, and the unrestricted users'workstations to another proxy, this would work, but would be workstation based, not user based.

Does anyone have any suggestions to how to achieve this?

Thanks, Mark.

8 replies

by mckaytech

Without resorting to a third-party product, using two proxy servers seems to be the only feasible answer.

I'm relatively sure you can write a kixstart script that will write proxy server information into the workstation registry so you would create a logon script for each of the two groups. As a user logs on, the appropriate logon script will run, set up their registry profile and thereby point them to the proper Proxy server for their authorized level of access.

paul

by ben

you can definitely do this with kixtart, but if like me your not hot at scripting, have a look at www.scriptlogic.com, this well do you a script without needing any kix's skills. goodluck

by Former member

Maybe you can route the restricted users to use the Proxy server, while the unrestricted users do not use the proxy server?

by corky132

Here's the answer in a nutshell.. it's weird, but it'll work..

first, write a system policy that has only the people who need to be restricted that puts the proxy IP address in their browser. These people will use the WEB proxy service on the proxy server.. then goto the web proxy service, under security, you can deny all web sites, except the ones you want.

for all other clients, install the winsock proxy client on their machines, give them full access on the WINSOCK proxy service (on the proxy)..

it'll work, it just takes a little time to setup...

the only problem is that the restricted users will have to NOT be able to install the winsock proxy client (that might give them access to the winsock proxy service)..

other than that, you're set.

This discussion is closed to new replies.