Re: Couple of issues

From: JR (jrkim_mail@yahoo.com)
Date: 09/12/02 

From: "JR" <jrkim_mail@yahoo.com>
Date: Thu, 12 Sep 2002 09:21:53 -0700

As for the printers share folders, set permissions on the
printer shares. Everybody on NT4 domain, you can
literally browse anything, but in order for limiting the
access, set the permissions. I believe you can also hide
the printer share by using $ at the share name. That will
hide some printer shares.

As for the group policy goes on nt4 domain, you could
create group policy file make it happen, but the settings
are limited. You might want to use Microsoft's Security
Configuration Tool to set the setting and then export it
to template file (.inf) then put it in a logon script or
image of the desktop so that it can be applied. Use
secedit command line utility that comes with SCM.

As for the internet explorer access, I don't know how's
your network is setup, but you can filter at the firewall
level to block http and https ports going out to internet
or you could also block at router level for ports going
out to internet. You could also setup users with private
ip addresses and set up proxy servers to block ip
addresses going out to internet. There are many ways, but
I don't think there is a way for software side since
sounds like your users are more than average users.

Good luck,
JR
>-----Original Message-----
>You cannot have group policy without 2000AD.
>I suggest you upgrade to 2000 after all NT4 is no longer
the industry
>standard. What are you waiting for???
>
>
>"Steve" <stebs@talk21.com> wrote in message
>news:eWrS8xlWCHA.2452@tkmsftngp09...
>> Hello,
>>
>> I have a network of around 50 users and when I log into
the network as a
>> test user with minimal rights I am able to browse to
other pc's on the
>> network through My Network Places and expand the PC to
find their printer
>> folder and on some but not all of them I am able to
schedule tasks to run
>at
>> specific times. Now I thought it might be to do with
not having a local
>> admin password set on that machine but this isn't so is
their any other
>> reason why this is possible? And how do i get around it?
>>
>> Also i would like to be able to apply group policies
across the network
>but
>> at present I am running a NT4 domain as apposed to a
win2k domain and
>active
>> directory, can group policies be applied to an NT4
domain? and how? (the
>> network has 3 NT4 servers and 2 Win2k servers the
domain is authenticated
>by
>> a NT4 server.) Files are held on a win2k server.
>>
>> Finally, is there any way of restricting people using
internet explorer so
>> they can only access our intranet site(this network
doesn't have access to
>> the internet but the user can enter printer ip
addresses and server names
>to
>> try and access stuff they shouldn't be.)
>>
>> Big thanks in advance
>>
>> Steve
>>
>>
>
>
>.
>

Relevant Pages

  • Re: Couple of issues
    ... select "bypass proxy server for local addresses". ... user tries to access the internet, ... Everybody on NT4 domain, you can ... >your network is setup, but you can filter at the firewall ...
    (microsoft.public.win2000.security)
  • block internet access
    ... I have a subnet in a remote location that 2 computers need to be blocked ... Can I use group policy to do this or some other way in Active Directory? ... They are on the 192.168.4.0 network, go through the router to the main ... network 192.168.1.0 to get Internet. ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Administrator
    ... > malware like a worm that wants to spread via your network. ... > becomes infected while the logged on user is a local administrator then ... > to use the internet will greatly reduce that risk. ... >> Right now I'm using Group Policy to lockdown the PC so that the only ...
    (microsoft.public.win2000.security)
  • Disable using an other users username and password when logged in.
    ... I have disabled the internet for some users on our network and for some ... possible in group policy? ... disabling it? ...
    (microsoft.public.windows.group_policy)
  • Re: 802.1x machine authentication without directory
    ... The systems on the network I'd be NAC-ing are XP ... support machine auth when they have a directory to confirm the ... NT4 domain controller? ...
    (comp.security.misc)