Can I restrict User's acess to the Internet?

[Hank Arnold]

We are running Citrix MetaFrame XPA SP2 on W2K Advanced Server w/TS and AD.
Our users get
a full screen desktop from the server. I've been asked by management to
restrict internet access and external e-mail to everyone except those
specifically allowed access. The e-mail part is doable (we use Exchange 5.5)
by playing with the IMC settings. However, it's not clear to me how to do
the internet part. I'd appreciate any pointers.

 

[Cary Shultz [A.D. MVP]]

Hank,

This just might be an opportunity to look into ISA Server.

Or, if the budget does not allow, you might want to look into Group Policy.
There are a couple of ways to do this. One way is to setup users in an OU
( if you have not already done this ) and to apply a GPO to that OU in which
you give a purposely incorrect Proxy Setting -AND- you remove the ability of
those affected users to change that Proxy Setting. If all of your users are
in one OU ( and I do not mean a container - the Computers and the Users
'folders' that you see in the ADUC are not Organizational Units, they are
Containers ) you could possibly use Security Groups to filter the GPO. The
permissions in question are 'Read Policy' and 'Apply Group Policy'. Simply
replace the 'Authenticated Users' group with the security group of your
choice ( you might have to manually create it ).

I do know that Chriss suggested that there is another way to do this but I
can not seem to find that posting....

HTH,

Cary

 

[Chriss3]

Cray and Hank. There is a easy solution with Group Policies and Content
Advisor to do a such restrication domain wide or for a single Site or OU. In
fact I use wrote an article about this:

How to restrict internet access Domain wide or for a single Site or OU with
Group Policies :
http://www.chrisse.se/MAQB.asp?ID=17

Hope that helps, Have a nice day!

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

 

[Cary Shultz [A.D. MVP]]

That does help, Chriss.

Thank you.

Cary

Cray and Hank. There is a easy solution with Group Policies and Content
Advisor to do a such restrication domain wide or for a single Site or OU. In
fact I use wrote an article about this:

How to restrict internet access Domain wide or for a single Site or OU with
Group Policies :
http://www.chrisse.se/MAQB.asp?ID=17

Hope that helps, Have a nice day!

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup

ability

 

[Hank Arnold]

Thanks, Chris & Cary............