block internet access

  • Thread starter Thread starter Enrique Garcia
  • Start date Start date
E

Enrique Garcia

Is there a way to block internet access using group policies? I have looked
through the policies, and there are a lot of features related to Internet
Explorer.
thanks in advance,
Enrique
 
hi enrique,
Is there a way to block internet access using group policies?
Click to expand...

here's a workaround, IE is locked down, email works. i have a usergroup
"nointernet" with a GPO, no other GPO's can overwrite this one.

in userconfig/admintempl/WindwosComponents/InternetExpl/InternetSettings i
activated all settings. so, the user can only change cookie settings in
internet explorer settings.

in userconfig/windowssettings/InernetExplorer/Connections/Proxy Settings i
defined a non existing internal IP-adress as proxy server.

so, all surfing will go to nirvana. maybe a dirty trick, but it works and i
have no other means to do it. If you have any other possibility (real
ProxyServer or other Software that can do the job) let them work for you.

best regards

arno
 
Great. That a good idea.
thanks,
eg
arno schoblocher said:
hi enrique,


here's a workaround, IE is locked down, email works. i have a usergroup
"nointernet" with a GPO, no other GPO's can overwrite this one.

in userconfig/admintempl/WindwosComponents/InternetExpl/InternetSettings i
activated all settings. so, the user can only change cookie settings in
internet explorer settings.

in userconfig/windowssettings/InernetExplorer/Connections/Proxy Settings i
defined a non existing internal IP-adress as proxy server.

so, all surfing will go to nirvana. maybe a dirty trick, but it works and i
have no other means to do it. If you have any other possibility (real
ProxyServer or other Software that can do the job) let them work for you.

best regards

arno
Click to expand...
 
hi enrique,

i forgot to mention that i have a GPO that is the "standard" GPO for my
users with slightly different settings inso that the users that are allowed to surf cannot change all the options in
internet explorer. this is why the "nointernet" GPO cannot be overwritten by
other GPO's (which would set weaker settings in my case).

bye

arno
 
Back
Top