General discussion

Locked

Internet access

By mdarmody ·
Is it possible to deny a user or group the access to the internet with Windows 2000 Pro? How?

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Internet access

by ewgny In reply to Internet access

If you have a win2k Domain you can use group policy to give the user a bogus proxy address.
you must also user GP to restrict them from changing the proxy address. If you think you may want to use this method, post back and I will give you more detail.

Collapse -

Internet access

by ewgny In reply to Internet access

Create an Organizational unit in AD users & computers. Or apply the following group policy to the OU that contains the users you would like to restrict. Right click the OU that contains the users. properties - group policy.
Create a new group policy. call it no internet access. navigate to user configration - windows settings - internet explorer maintenance - connection - proxy settings. Enable the policy and add a bogus proxy address.
Then navigate to user configuration - administrative templates - Internet explorer and enable the policy "disable changing proxy settings"
Now for all of the users that in a OU with the "no internet policy" , their browser will fail trying to use the bogus proxy, and the won't be able to change the proxyaddress to bypass the proxy policy

Collapse -

Internet access

by ewgny In reply to Internet access

If you want to restrict by computer instead of by user, you can use a loopback policy instead. Again if you need more detail on that procedure post back.
- Good luck

Collapse -

Internet access

by ewgny In reply to Internet access

A loopback policy will apply the group policy to the computer object rather than the user object in AD. You use it to apply a policy to a computer
instead of a user. For example if you had a computer say at a reception desk, and you didn't want anyreceptionists to use the receptionist desk for internet access. You however didn't want to restrict access on their user account because in the back office they require internet access to perform their job function, you could use the loopback policyto restrict just the front desk computer.

Collapse -

Internet access

by mdarmody In reply to Internet access

I would like to get some more detail on the subject if you do not mind. Thanks

Collapse -

Internet access

by mdarmody In reply to Internet access

what is the Loopback policy?

Collapse -

Internet access

by dbowlin In reply to Internet access

Try filtering out port 80 in the advanced TCP/IP configuration settings.

Good luck,
Dan.

Back to Security Forum
7 total posts (Page 1 of 1)  

Related Discussions

Related Forums