No -executables on network shares (FSRM) USB -Disabled Wget -not a native windows app FTP -(Not installed as a Role/Feature , no command prompt, and that's why I'm trying to lock the browser down in the first place) so they cant open IE and get to ftp://URL.ACCESS.DENIED)
and no installation rights should make the above a moot point They may have MBA's in finance, but they still dont realize a wireless mouse requires batteries :) Date: Tue, 8 Jul 2014 20:15:58 -0400 Subject: Re: [NTSysADM] Locking IE, GPP clarification From: [email protected] To: [email protected] FTP? Network share? USB stick? Wget? On Tue, Jul 8, 2014 at 6:23 PM, J- P <[email protected]> wrote: if they have no install rights, how can they grab another browser? and it is only 3 users, not knowledgeable, just not very savvy Jean-Paul Natola Date: Tue, 8 Jul 2014 17:30:49 -0400 Subject: Re: [NTSysADM] Locking IE, GPP clarification From: [email protected] To: [email protected] I would do it at the network edge with appropriate firewall rules. There's nothing stopping a knowledgeable user from grabbing another browser and using that to go wherever they want. On Tue, Jul 8, 2014 at 5:17 PM, J- P <[email protected]> wrote: Hi all, I'm trying tolock down internet access on a new server, I ONLY want the server (TS) to access the webex site for our software vendors i.e; vendor.webex.com vendor2.webex.com The server is 2008r2 running IE 11, so the question i , do i do it via Windows Components\Internet Explorer\Internet Control Panel\Security Page. Zone Assignment or GPP , User, Preferences>Windows Settings>Control Panel Settings > Internet Settings I have seen documentation that point to both any help would be great thakns
