Re: Restricting Internet use by User Login
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 17 Jan 2006 12:24:57 -0600
The ideal solution would be to use a firewall such as ISA 2004 which can
have firewall rules based on user/group membership. You can try ISA 2004 for
free but it is not an inexpensive solution as it is a very powerful and
sophisticated product.
http://www.microsoft.com/isaserver/default.mspx --- ISA 2004
Assuming the users are regular users that can not install other internet
browsers, etc a lot have used the trick of configuring proxy settings for IE
to restrict users. Unrestricted users would have no proxy settings, those
allowed no internet access would be configured with a bogus proxy server,
and those with limited access would be configured with a bogus proxy server
with the exceptions listed for the allowed sites under advanced tab -
exceptions.
This can be done via Group Policy if you look under user
configuration/Windows settings/Internet Explorer maintenance/connection -
proxy settings. If you want to try such make sure that uses can NOT access
the connection page of IE settings or they will be able to change the proxy
settings. That can also be enforced via Group Policy under user
configuration/administrative templates/Windows components/Internet Explorer
where you will see a whole lot of settings. Also IE maintenance settings
have a history of not being reliable so be sure to read the first link below
on IE maintenance GP processing and how to make sure it gets applied at
every GP refresh. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;316702
http://pcsupport.about.com/od/quicktips/qt/disableie.htm --- basics of
bogus proxy configuration
http://support.microsoft.com/kb/209252 -- proxy exceptions
"Chris W" <1qazse4@xxxxxxx> wrote in message
news:7bazf.5478$ZE.121@xxxxxxxxxxxxx
> Is it possible to set up a windows 2000 server domain controller with NAT
> so I can limit what Internet access certain users have? I want the users
> to be able to log in to any computer on the network and then have only
> their Internet rights. I basically need three types of users. Those with
> no Internet access at all , those with unrestricted access and those that
> can only go to certain business sites. Can win2k Server do this or do I
> need more software?
>
> --
> Chris W
> KE5GIX
>
> Gift Giving Made Easy
> Get the gifts you want & give the gifts they want
> One stop wish list for any gift, from anywhere, for any occasion!
> http://thewishzone.com
.
- References:
- Restricting Internet use by User Login
- From: Chris W
- Restricting Internet use by User Login
- Prev by Date: Restricting Internet use by User Login
- Next by Date: Re: Trust Relationship
- Previous by thread: Restricting Internet use by User Login
- Next by thread: Re: Restricting Internet use by User Login
- Index(es):
Relevant Pages
|
|
