IE

[Guest]

How to disable a user on using IE or disable him to access the internet?

 

[Ace Fekay [MVP]]

In

How to disable a user on using IE or disable him to access the
internet?

Use a Proxy or ISA server is the proper way. You can also create a separate
OU just for that user, create a GPO in that OU, then in IE settings in the
GPO, put in a fake proxy address. The GPO will only apply to that users'
machine and will curtail only that user.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Cary Shultz [A.D. MVP]]

Ace,

If CK does it via the GPO then CK would also have to set it so that the user
can not change the fake proxy address. But you are dead on, using ISA is a
really good way to do this. However, money is not always available so other
options need to be explored.

Cary

"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

Ace,

If CK does it via the GPO then CK would also have to set it so that
the user can not change the fake proxy address. But you are dead on,
using ISA is a really good way to do this. However, money is not
always available so other options need to be explored.

Cary

True on the budget thing. But if IE is set to use a proxy at the GPO level,
it will be grayed out on the user side so they won't be able to change that,
unless I got that wrong? WHenever we've used adm settings for such things as
Outlook Options (installing the adm template), whatever we set there forces
the settings on the user end and they can't change it beacuse its grayed
out.

Ace

 

[Cary Shultz [A.D. MVP]]

Ace,

I will have to check. I want to say that it is a two-step thing: make the
change and then disallow users from changing it.

Cary

"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

In

Ace,

I will have to check. I want to say that it is a two-step thing:
make the change and then disallow users from changing it.

Cary

Might have a point there. IIRC, with the Outlook template, they are forced.
I can't remember with IE settings. I will have to play with it to test it
when I get a chance, since this comes up alot.

Ace