Restricting Internet use by User Login

[Chris W]

Is it possible to set up a windows 2000 server domain controller with
NAT so I can limit what Internet access certain users have? I want the
users to be able to log in to any computer on the network and then have
only their Internet rights. I basically need three types of users.
Those with no Internet access at all , those with unrestricted access
and those that can only go to certain business sites. Can win2k Server
do this or do I need more software?

--
Chris W
KE5GIX

Gift Giving Made Easy
Get the gifts you want &
give the gifts they want
One stop wish list for any gift,
from anywhere, for any occasion!
http://thewishzone.com

 

[Steven L Umbach]

The ideal solution would be to use a firewall such as ISA 2004 which can
have firewall rules based on user/group membership. You can try ISA 2004 for
free but it is not an inexpensive solution as it is a very powerful and
sophisticated product.

http://www.microsoft.com/isaserver/default.mspx --- ISA 2004

Assuming the users are regular users that can not install other internet
browsers, etc a lot have used the trick of configuring proxy settings for IE
to restrict users. Unrestricted users would have no proxy settings, those
allowed no internet access would be configured with a bogus proxy server,
and those with limited access would be configured with a bogus proxy server
with the exceptions listed for the allowed sites under advanced tab -
exceptions.

This can be done via Group Policy if you look under user
configuration/Windows settings/Internet Explorer maintenance/connection -
proxy settings. If you want to try such make sure that uses can NOT access
the connection page of IE settings or they will be able to change the proxy
settings. That can also be enforced via Group Policy under user
configuration/administrative templates/Windows components/Internet Explorer
where you will see a whole lot of settings. Also IE maintenance settings
have a history of not being reliable so be sure to read the first link below
on IE maintenance GP processing and how to make sure it gets applied at
every GP refresh. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;316702
http://pcsupport.about.com/od/quicktips/qt/disableie.htm --- basics of
bogus proxy configuration
http://support.microsoft.com/kb/209252 -- proxy exceptions

 

[Bob]

Is it possible to set up a windows 2000 server domain controller with
NAT so I can limit what Internet access certain users have? I want the
users to be able to log in to any computer on the network and then have
only their Internet rights. I basically need three types of users.
Those with no Internet access at all , those with unrestricted access
and those that can only go to certain business sites. Can win2k Server
do this or do I need more software?

Seems like a lot of work for the IT guy (you) when the real problem is
simply a business policy that says "you can do this, and not that" on
company time. Maybe the Corp needs to start treating adults like
adults instead of little kids

 

[Chris W]

Seems like a lot of work for the IT guy (you) when the real problem is
simply a business policy that says "you can do this, and not that" on
company time. Maybe the Corp needs to start treating adults like
adults instead of little kids

My feelings exactly. Either you trust your employees, or you fire them,
and get some you can trust.

--
Chris W
KE5GIX

Gift Giving Made Easy
Get the gifts you want &
give the gifts they want
One stop wish list for any gift,
from anywhere, for any occasion!
http://thewishzone.com