Security
does anyone know the easy way to shut off IE so users cannot surf the internet.
the only two ways i know are:
1) use the set program defaults it shuts it off for everyone.
2) go to the internet explorer and add the user then deny them access.
i checked group policy and cannot find anything for that.
thx
by bfilmfan
There is indeed a way to stop users from using particular Windows applications.
Basically, you will need to create a GPO that applies to the users that you don't want surfing the net, as detailed below:
1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click your domain, and then click Properties.
3. Click the Group Policy tab.
4. In the Group Policy Object Links box, click the group policy to which you want to apply this setting. For example, click Default Domain Policy.
5. Click Edit.
6. Expand User Configuration, expand Administrative Templates, and then expand System.
7. In the right pane, double-click Don't run specified Windows applications.
8. Click Enabled, and then click Show.
9. Click Add, and then type the executable file name of the program that you want to restrict users from running. For example, type iexplore.exe.
10. Click OK, click OK, and then click OK.
11. Quit Group Policy Object Editor, and then click OK.
Enjoy!
by rbobcat
i know i can use Group Policy in AD but our machines are not in AD
by tomsal
In all honesty, the easiest way possible is simply, deny the user (or users) in question port 80 access via your firewall.
This is all I do with ours, it works like a charm and takes all of *maybe* 10 seconds (if I'm in a tired mood) to complete.
If you don't have a firewall, that's very um...bad...:) But there are other solutions, just respond back if you need another option and I'll help you out more.
later.
by rbobcat
Blocking port 80 is a good idea but then it blocks everyone. i have control of 400 on a network of 4500 computers
by ewgny
See my answer for how to deny a user internet access via group policy
http://tinyurl.com/4haz8
by rbobcat
Thx, although I knew I could do it all off these ways offered this was the best answer of all. Once we migrate to AD it will make it easier to control. But for now I have to use the permissions route.
by rbobcat
This discussion is closed to new replies.
Sort by Trending