Re: block internet
From: Steven L Umbach (n9rou_at_comcast.net)
Date: 08/19/03
- Next message: Jim Bohan: "Cannot Login to My Win2000 Server"
- Previous message: John Tam: "Can Unlock multi account on windows 2000 server(stand alone)?"
- In reply to: Bruce: "block internet"
- Next in thread: BBarker: "Re: block internet"
- Reply: BBarker: "Re: block internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 19 Aug 2003 04:26:52 GMT
You can use gpedit.msc on your computer to access Group Policy. Check out the
settings under user configuration and you will find a couple places to configure
Internet Explorer. In one of those places you can disable the abilities of users to
change settings. However on a stand alone machine, these settings will apply to all
users. You can get around that by going to the \winnt\system32\grouppolicy\users
folder and give the administrator deny permissions to that folder - as an
administrator you can always take ownership and change it back any time you need.
Make sure the other users are only regular users and change the ntfs permissions on
the root folder to read/list/execute. Do NOT check to make the changes apply to all
child objects on the advanced properties page. This should stop the other users from
installing most programs, but not all. If that does not work out, consider upgrading
to Windows XP Pro because the Software Restriction Policies it has are very powerful
in preventing users [while exempting administrators] from installing/using any
unwanted software with path, certificate, and hash rules. I would also install a
personal firewall on the computer, because many like Sygate and Kerio can restrict
internet access by specific application. That will prevent users from running
"unauthorized" internet applications. There are $120 consumer/small office firewalls
like the Netgear FVS318 that can do that also. Disk quotas is another feature of
Windows 2000 that can help keep users in check by giving them limited storage based
on file ownership on a volume that you configure. --- Steve
http://support.microsoft.com/?kbid=183322
http://www.webattack.com/Freeware/security/fwfirewall.shtml
http://support.microsoft.com/?kbid=310791
"Bruce" <bruce@garibaldico.com> wrote in message
news:065c01c365e7$5b3a6430$a401280a@phx.gbl...
> Help, not sure if I am in the right spot, I have a
> computer with 2000, installed, and have 10 employees. I
> have set myself as the administrator, and the rest as
> users. They still have the ability to access the
> internet, but I would like to block all downloads, and
> also stop them from installing other programs. when
> logged in as user, I went to properties, and blocked
> downloads there, but all they have to do is uncheck it.
> Can I do it with my administrator rights and stop
> them...thank you
> Bruce
> bruce@garibaldico.com
- Next message: Jim Bohan: "Cannot Login to My Win2000 Server"
- Previous message: John Tam: "Can Unlock multi account on windows 2000 server(stand alone)?"
- In reply to: Bruce: "block internet"
- Next in thread: BBarker: "Re: block internet"
- Reply: BBarker: "Re: block internet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
