User Settings on only some computers

[Jordan]

I want to set the proxy settings on 10 of my computers so no user can access
the Internet but I don't want to prevent the users from accessing the
Internet via other computers. I would like to use GP to set the Proxy to a
bogus proxy, but my problem is if I set it on the User container, the user
will get the setting no matter what computer.

Since the Proxy setting is per user, how do I get the setting to work on
just these 10 computers?

 

[Norbert Fehlauer [MVP]]

Jordan wrote:
Hi,

I want to set the proxy settings on 10 of my computers so no user can
access the Internet but I don't want to prevent the users from
accessing the Internet via other computers. I would like to use GP
to set the Proxy to a bogus proxy, but my problem is if I set it on
the User container, the user will get the setting no matter what
computer.
Since the Proxy setting is per user, how do I get the setting to work
on just these 10 computers?

Put your 10 computers in a separate OU and enable the loopback mode in a GPO
on that OU. Than the userconfiguration in this GPO take precedence over your
normal userconfig. You should know, that setting a bogus proxy does not
prevent a skilled user not to access the internet. Maybe you should consider
looking into a proxy solutions with user authentification.

HTH
Norbert

 

[Jordan]

Thanks, I will try that.

I know they can probably change the proxy settings if they know how, but it
is much easier for them to browse the Internet on their own computer across
the room. I do have ISA 2000 on the server and can block per user that way,
but I need to keep these users from using these particular machines so I
think the loop back will be my best bet.

 

[Norbert Fehlauer [MVP]]

Jordan wrote:
Hi,

computer across the room. I do have ISA 2000 on the server and can
block per user that way, but I need to keep these users from using
these particular machines so I think the loop back will be my best
bet.

Hi. Then block the computers (IP addresses) at the ISA Server (client
address set). Would be much more secure.

HTH
Norbert