Discussion Locked

Restrict Internet Explorer

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi!

There are Win2K domain with Active Directory, and I need to restrict some group of users from using Internet Explorer or accessing to Internet during working hours. Could you please tell me how?
Any detail comments or help will be appreciated so mcuh. Thanks.

7 replies

by voldar

Create an OU named lets say "IE Denied". Make the users you have to restrict permissions part of this OU. You can also create a Group "IE Denied". Attach to this OU a group policy.

by dbowlin

You should be able to do it with any of these suggestions.

Turn off port 80 on the individual PC's.

Exclude those IP addresses from internet access at the firewall, or router.

Make a group policy that does not allow iexplore.exe to run

Good luck,

by voldar

Once you create the OU, you right click on it, chose Properties > Group Policy
Add new policy - namde ie: IE_DENIED. Edit it, go to USER CONFIGURATION, and select Administrative Templates > System > Don't run specified Windows Applications and you add : iexplorer.exe, netscape.exe and opera.exe.
After you do that, you save it and then you run from the cmd the following:
c:\secedit /refreshpolicy user_policy /enforce
this will refresh the policies on your AD domain.
That's it!

This discussion is closed to new replies.