Re: Internet Access Restriction using Group Policy - Anyone know how?

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/31/04 

Date: Fri, 31 Dec 2004 02:06:07 GMT

There are a couple of ways. One is to configure all the users to have a
bogus proxy address for Internet Explorer. You can do that under user
configuration/Windows settings/Internet Explorer Maintenance - connections.
That will work ONLY for Internet Explorer. If it would work to deny access
to the internet to "computers" you could create an ipsec filtering policy
using permit and block filter actions that could block all or specific
internet access by destination IP address/port/protocol. The link below
explains more on how to create an ipsec filtering policy. If you decide to
try such, test via Local Security Policy on a couple computers to make sure
it works as planned and that users can still logon to the domain and access
needed resources. A local ipsec policy can be exported/imported and assigned
via a GPO to "computers" under the scope of influence of the policy. ---
Steve

http://www.securityfocus.com/infocus/1559

"BobRosas" <BobRosas@discussions.microsoft.com> wrote in message
news:71D563C2-9491-4F24-802B-1DF74EDAB34E@microsoft.com...
>I want to restrict internet access through a GPO. Can this be done?

Relevant Pages