Re: restricting select users from getting to web on XP Prof?

From: JW (JustPostYourReply_at_ToThisNewsGroup.pls)
Date: 03/04/05 

Date: Fri, 04 Mar 2005 19:46:33 GMT

the pages i was referring to do not explain how to create multiple GPOs
on a workgroup computer. as i said, the pages only explain how to make
local GP settings apply to one group, while Not applying to another.

in the spirit of trying to help you out, if all else fails, you could
resort to simple NTFS permissions, and disallow or deny Execute
privileges to all the programs that access the internet (e.g. browsers,
mail clients, IM and file sharing programs, voice and video conferencing
programs, A/V streaming programs etc.)

p.s.
if you can set up multiple GPOs in an Active Directory / Server
configuration, and workstation users authenticate from the server, can
you Not put them into a new group, with policy rights / privileges
assigned to their GPO from the Server, as Malke mentioned ?

Leythos wrote:
> On Fri, 04 Mar 2005 04:06:53 +0000, JW wrote:
>
>>it is too much to retype, but i think pages 1074-1075 in the book
>>Windows XP Inside Out will help you. the section is named "Making
>>Different Settings for Different Users", and explains how to make local
>>GPO settings apply to one group, while Not applying to another.
>
>
> I was not aware that I could create GPO's on a workgroup computer, I
> thought it was a AD/DC method only?
>
>
>>Leythos wrote:
>>
>>>I have a client running a workstation - XP Prof, that has 15 accounts on
>>>the box, he wants to keep 8 (User Accounts) of them from accessing the
>>>internet completely. The machine must still perform Windows Updates and
>>>other AV updates, and still allow the other 7 (Administrator
>>>Accounts) users to access the net and anything else. All users must be
>>>able to access the shares on another computer.
>>>
>>>Any idea how I can do this without any third party tools?
>>>
>>>TIA.
>>>
>
>
>