G
Guest
How to disable a user on using IE or disable him to access the internet?
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
A
Ace Fekay [MVP]
In
Use a Proxy or ISA server is the proper way. You can also create a separate
OU just for that user, create a GPO in that OU, then in IE settings in the
GPO, put in a fake proxy address. The GPO will only apply to that users'
machine and will curtail only that user.
--
Regards,
Ace
Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.
This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
CK said:How to disable a user on using IE or disable him to access the
internet?
Use a Proxy or ISA server is the proper way. You can also create a separate
OU just for that user, create a GPO in that OU, then in IE settings in the
GPO, put in a fake proxy address. The GPO will only apply to that users'
machine and will curtail only that user.
--
Regards,
Ace
Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.
This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
C
Cary Shultz [A.D. MVP]
Ace,
If CK does it via the GPO then CK would also have to set it so that the user
can not change the fake proxy address. But you are dead on, using ISA is a
really good way to do this. However, money is not always available so other
options need to be explored.
Cary
"Ace Fekay [MVP]"
If CK does it via the GPO then CK would also have to set it so that the user
can not change the fake proxy address. But you are dead on, using ISA is a
really good way to do this. However, money is not always available so other
options need to be explored.
Cary
"Ace Fekay [MVP]"
A
Ace Fekay [MVP]
In
True on the budget thing. But if IE is set to use a proxy at the GPO level,
it will be grayed out on the user side so they won't be able to change that,
unless I got that wrong? WHenever we've used adm settings for such things as
Outlook Options (installing the adm template), whatever we set there forces
the settings on the user end and they can't change it beacuse its grayed
out.
Ace
Cary Shultz said:Ace,
If CK does it via the GPO then CK would also have to set it so that
the user can not change the fake proxy address. But you are dead on,
using ISA is a really good way to do this. However, money is not
always available so other options need to be explored.
Cary
True on the budget thing. But if IE is set to use a proxy at the GPO level,
it will be grayed out on the user side so they won't be able to change that,
unless I got that wrong? WHenever we've used adm settings for such things as
Outlook Options (installing the adm template), whatever we set there forces
the settings on the user end and they can't change it beacuse its grayed
out.
Ace
C
Cary Shultz [A.D. MVP]
Ace,
I will have to check. I want to say that it is a two-step thing: make the
change and then disallow users from changing it.
Cary
"Ace Fekay [MVP]"
I will have to check. I want to say that it is a two-step thing: make the
change and then disallow users from changing it.
Cary
"Ace Fekay [MVP]"
A
Ace Fekay [MVP]
In
Might have a point there. IIRC, with the Outlook template, they are forced.
I can't remember with IE settings. I will have to play with it to test it
when I get a chance, since this comes up alot.
Ace
Cary Shultz said:Ace,
I will have to check. I want to say that it is a two-step thing:
make the change and then disallow users from changing it.
Cary
Might have a point there. IIRC, with the Outlook template, they are forced.
I can't remember with IE settings. I will have to play with it to test it
when I get a chance, since this comes up alot.
Ace