General discussion

Locked

Stop certain users accessing internet

By hegemon ·
Is there a way, perhaps using group policy, to stop access to the internet for a certain group of users. It needs to be accomplished on a by-user basis as some staff members log on to the same machines and require internet. We have a Windows 2003 native domain with two DCs, one running MDaemon for mail and the other mainly file and print sharing. The client machines are all XP Pro running Office 2000. We have a Sco Unix box running the inventory/sales software.

This conversation is currently closed to new comments.

10 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Stop certain users access ...

Here is a discussion on this very topic, involving setting IPSec in Group Policy, then applying it to a certain OU:
http://tinyurl.com/2okjj

Collapse -

by hegemon In reply to

Poster rated this answer.

Collapse -

by ewgny In reply to Stop certain users access ...

Very easy. Create a group policy for the users you want to restrict. In that policy configure the proxy policy with a bogus IP address. Also in the same policy restrict the users ability to change the proxy settings.

Collapse -

by hegemon In reply to

Poster rated this answer.

Collapse -

by wcp In reply to Stop certain users access ...

Log on as Administrator or account with administrative right.
Create a group, say NoInternet, and put all users whom you do not want to access Internet in that group.
Make sure none of them belongs to a group (for example, Power Users) that can install browser programs.

Open Command Prompt and navigate to the folder where iexplore.exe is (typically, Winnt\Internet Explorer).

Type the following command and enter.

CACLS iexplore.exe /D NoInternet

The above command denies NoInternet group to run iexplore. If there is other browser, you must specify that one too.

Collapse -

by wcp In reply to

iexplore.exe is in Program files\Internet Explorer folder.

Collapse -

by hegemon In reply to

Poster rated this answer.

Collapse -

by jlbpotter In reply to Stop certain users access ...

If you are using Active Directory and want to do it through Group Policy just creat an OU called No Internet for example and put users in there that you don't want to have internet access. Then create a Group Policy on that OU that sends the users to a nonexistent proxy server for their internet access. You may also want to disable the connections tab in the Internet Control Panel so they can't change this. It is very simple to set up. I use it for three different domains that I manage. If you have any questions email me at jlbpotter@hotmail.com.

Collapse -

by hegemon In reply to

Poster rated this answer.

Collapse -

by hegemon In reply to Stop certain users access ...

This question was closed by the author

Back to Windows Forum
10 total posts (Page 1 of 1)  

Related Discussions

Related Forums