Denying Internet Access

[Guest Thomas DeJohn]

I have been asked to prevent certain users from accessing the Internet.

These users work from thin clients and Terminal services 2003. Is there a

way to deny access using a group policy or something from the terminal

session itself?

 

TIA

[Guest TP]

Re: Denying Internet Access

 

Hi,

 

One technique you can use is to assign certain groups a

fake proxy server setting using group policy. That way

if they attempt to browse the Internet they will not get

a response. For example, you could use 127.0.0.1 for

the proxy server address.

 

-TP

 

Thomas DeJohn wrote:

> I have been asked to prevent certain users from accessing the

> Internet. These users work from thin clients and Terminal services

> 2003. Is there a way to deny access using a group policy or something

> from the terminal session itself?

>

> TIA

[Guest Thomas DeJohn]

Re: Denying Internet Access

 

That is how it is set now. But some of the users have figured out that they

can bypass the proxy settings in Internet Explorer. Is there a way to either

keep them from changing that or a different way to keep them from getting to

the Internet?

 

 

 

"TP" <tperson.knowspamn@mailandnews.com> wrote in message

news:uj7bhvjGIHA.1164@TK2MSFTNGP02.phx.gbl...

> Hi,

>

> One technique you can use is to assign certain groups a fake proxy server

> setting using group policy. That way if they attempt to browse the

> Internet they will not get a response. For example, you could use

> 127.0.0.1 for the proxy server address.

>

> -TP

>

> Thomas DeJohn wrote:

>> I have been asked to prevent certain users from accessing the

>> Internet. These users work from thin clients and Terminal services

>> 2003. Is there a way to deny access using a group policy or something

>> from the terminal session itself?

>>

>> TIA

[Guest TP]

Re: Denying Internet Access

 

Hi,

 

Enable the "Disable changing proxy settings" group policy

setting. An alternative is to disable the Connections tab

completely (normal users do not need this anyway) using

the "Disable the Connections page" gp setting.

 

It is best to have their supervisor/manager send a memo

making it clear that Internet browsing is not permitted. In

some cases it may be necessary to install monitoring

software to firmly document behavior of problem users.

 

There are numerous other ways to disable the browsing

experience if needed, however, these should not be needed

in most cases.

 

-TP

 

Thomas DeJohn wrote:

> That is how it is set now. But some of the users have figured out

> that they can bypass the proxy settings in Internet Explorer. Is

> there a way to either keep them from changing that or a different way

> to keep them from getting to the Internet?

[Guest td]

Re: Denying Internet Access

 

TP-

 

Thank you for your help! This will do the trick.

 

Thanks again.

 

"TP" <tperson.knowspamn@mailandnews.com> wrote in message

news:uvNxBClGIHA.1548@TK2MSFTNGP05.phx.gbl...

> Hi,

>

> Enable the "Disable changing proxy settings" group policy setting. An

> alternative is to disable the Connections tab completely (normal users do

> not need this anyway) using the "Disable the Connections page" gp setting.

>

> It is best to have their supervisor/manager send a memo making it clear

> that Internet browsing is not permitted. In some cases it may be

> necessary to install monitoring software to firmly document behavior of

> problem users.

>

> There are numerous other ways to disable the browsing experience if

> needed, however, these should not be needed in most cases.

>

> -TP

>

> Thomas DeJohn wrote:

>> That is how it is set now. But some of the users have figured out

>> that they can bypass the proxy settings in Internet Explorer. Is

>> there a way to either keep them from changing that or a different way

>> to keep them from getting to the Internet?