lock user to access the Internet

[el]

Hi,
I knew it by chance that a user who didn't belong to BackOffice Internet
User group could access the Internet from his user account. I believed he
used other users account/password when IE prompted him for user name and
password. How can I stop him from doing this? Was it really the way he
did? Was there any other ways he could 'bypass' policy setting?
el

 

[Lanwench [MVP - Exchange]]

Hi,
I knew it by chance that a user who didn't belong to BackOffice
Internet User group could access the Internet from his user account.
I believed he used other users account/password when IE prompted him
for user name and password. How can I stop him from doing this?

Make sure you have regular forced password changes, and make sure people
don't know other people's passwords or write their own down on stickies
attached to their monitors.

Was
it really the way he did?

Possibly - can't say.

 

[Cary Shultz [A.D. MVP]]

There are several ways to control who can get to the internet and who cant.

One of the more natural ways is to use ISA 2000 Server. Now, this can be a
bit expensive.

Another way is to create a group policy that (1) inputs a fake proxy address
( make sure that it is a bad IP Address ) and (2) disables the users
possibility to change that fake proxy IP Address. But, this simply allows /
disallows connectivity to the Internet.

HTH,

Cary

 

[el]

we have ISA 2k server. How do I set it up?

There are several ways to control who can get to the internet and who cant.

One of the more natural ways is to use ISA 2000 Server. Now, this can be a
bit expensive.

Another way is to create a group policy that (1) inputs a fake proxy address
( make sure that it is a bad IP Address ) and (2) disables the users
possibility to change that fake proxy IP Address. But, this simply allows /
disallows connectivity to the Internet.

HTH,

Cary

 

[Cary Shultz [A.D. MVP]]

El,

It has been awhile since I have done this but you would use security groups
to do this. I might suggest that you use the help or that you post to the
ISA news group.

HTH,

Cary