User Settings on only some computers

  • Thread starter Thread starter Jordan
  • Start date Start date
J

Jordan

I want to set the proxy settings on 10 of my computers so no user can access
the Internet but I don't want to prevent the users from accessing the
Internet via other computers. I would like to use GP to set the Proxy to a
bogus proxy, but my problem is if I set it on the User container, the user
will get the setting no matter what computer.

Since the Proxy setting is per user, how do I get the setting to work on
just these 10 computers?
 
Jordan wrote:
Hi,
I want to set the proxy settings on 10 of my computers so no user can
access the Internet but I don't want to prevent the users from
accessing the Internet via other computers. I would like to use GP
to set the Proxy to a bogus proxy, but my problem is if I set it on
the User container, the user will get the setting no matter what
computer.
Since the Proxy setting is per user, how do I get the setting to work
on just these 10 computers?

Put your 10 computers in a separate OU and enable the loopback mode in a GPO
on that OU. Than the userconfiguration in this GPO take precedence over your
normal userconfig. You should know, that setting a bogus proxy does not
prevent a skilled user not to access the internet. Maybe you should consider
looking into a proxy solutions with user authentification.

HTH
Norbert
 
Thanks, I will try that.

I know they can probably change the proxy settings if they know how, but it
is much easier for them to browse the Internet on their own computer across
the room. I do have ISA 2000 on the server and can block per user that way,
but I need to keep these users from using these particular machines so I
think the loop back will be my best bet.
 
Jordan wrote:
Hi,
computer across the room. I do have ISA 2000 on the server and can
block per user that way, but I need to keep these users from using
these particular machines so I think the loop back will be my best
bet.

Hi. Then block the computers (IP addresses) at the ISA Server (client
address set). Would be much more secure.

HTH
Norbert
 
Back
Top