What you need to do with System Policy Editor is use the user policy:
'System/Restrictions/Run only allowed Windows Applications' and add all
apps that you want these users to be able to execute to the list there.
The other solution would be to research the scripting options for
creating your own policies, and find a registry entry that would disable
the browsing mechanism. I actually looked for a way to do this for a
while and found that IEAK (the policy template in it) will let you do
everything up to the point of disabling every menu, but doesn't provide
a way to keep the browser from executing. What you could do is use the
IEAK policy to point to a non-existent proxy for your disallowed users
and lock down your "options" menu for all users to keep the proxy
address from being changed. That's how I'd go about it.
> -----Original Message-----
> From: Lemon, Henry L. [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 17, 1999 5:35 AM
> To: 'Matt Farwell'; [EMAIL PROTECTED]
> Subject: RE: machine names
>
>
> I have a similar problem. How do you restrict access by user
> name in an NT
> domain environment? Several users are sharing the same
> workstation. Some
> should have Internet privileges and some should not. The
> firewall is a
> transparent application proxy. I can block the IP address,
> however, I would
> like to be able to use the System Policy Editor if possible
> to assign users
> to groups. Network access would be controlled by the group
> that you are in.
>
>
> It has been suggested that I could do this with an NT firewall. I
> desperately need another option.
> TIA
>
> Henry Lemon [EMAIL PROTECTED]
> Aristech Chemical Corporation c=US;a=MCI;p=Aristech;s=Lemon;g=Henry
> phone: 412-433-7835
> fax: 412-344-1805
>
>
>
>
> -----Original Message-----
> From: Matt Farwell [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, February 16, 1999 2:36 PM
> To: [EMAIL PROTECTED]
> Subject: machine names
>
>
> I am looking for a way to restrict machine names on our network.
> Possibly restrict who is able to access the dhcp server. In effect
> limiting who is able to use tcp/ip on the network without statically
> assigning an ip.
>
> Is it possible to filter traffic based upon the machine name that is
> assigned to a microsoft based client?
>
> Any other suggestions are welcome.
>
> Thanks in advance,
>
> Matt Farwell
> Truman State University
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
