Windows Forum

Ask something
Discussion Locked

Internet access GPs in Active Directory

0 helpful
9 replies

by sprocket

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to set up group policies within Active Directory to enable to block users accessing the Internet.

I have a user group policy for standard users, which I disable internet access by adding a proxy setting in the connection option which takes the user to a page saying access denied.

I also have a Internet Access policy which only adds the correct proxy address to the users who have this policy applied to their account.

The problem I am having is that my Internet policy does not seem to override the standard user internet options.

I have other policies running for administrators and other accounts. The Internet Access policy is above the standard user policy to has higher importance. It is just the internet connection setting that seem to get over written.

Any help please.

9 replies

by voldar

If those standard users bellong also to other groups, then yes, you have this situation. My advice is to create a new OU, create the group of standar users, add the standard users, and apply the GPO with the IE settings to this GPO.

by beermonster

Hi,
within the gpo browse to admin templates \ windows components \ internet explorer - here you will find many settings to secure IE, along with a setting to prevent users changing their connection settings.

by sprocket

Poster rated this answer.
The problem is with clashing policies, some users ahve access and some don't.

by wtkool

The Internet Access policy is above the standard user policy to has higher importance. It is just the internet connection setting that seem to get over written.
Reverse the order.....policies actually read from the bottom up.

This discussion is closed to new replies.