Stopping MSN messenger

Make a DMZ, ie that all information that needs to go through 2 routers - that way, they cannot get access to MSN, unless they know how to get through two different packet filters

User------>1st Router -----> 2nd Router --->Internet

By using Active Directory, when a user logs into the network, you can limit the number of resources they use on the network. There is also a tab on the account properties where specific services like MSN can be disabled. The users wont be able to connect thereafter.

Hope this helps,

N.

Get rid of Windows 2000, now!
Run OpenVMS on Itanium or Alpha Servers

Well, I have to use every chance I can get to plug OpenVMS..

Now you can reject my answer.

OK, guys, jokes are very funny. Now back to reality. :)

1) Try & block port 1863 outbound on your Proxy. That effectively prevents MSN Messenger to connecting to Microsoft Messenger Service. That in turn prevents communication via MSN Messenger.
2) Note:
Turning off Instant Messaging in Active Directory affects Microsoft Exchange 2000 Messaging services. We in our company have in fact enabled Exchange Instant Messaging for certain group of users who need lightning fast communication without constantly hanging on the phone. This can improve productivity, while MSN Messenger is a private communication tool & some threat to security.

3) If you want to leave MSN Messenger on, just forbid to send files/use voice features, try blockingports 6891-6900 inbound & outbound.

4) "Toss Windows 2000"... Now who's gonna pay for that transition & new Itanium, Mr. Penguin. :)