Actually, I mistyped, here is the real insult to injury- They have spent that type of money on a cell phone BILL , not counting the phone itself.
Jean-Paul Natola From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Locking IE, GPP clarification Date: Wed, 9 Jul 2014 12:02:42 +0000 I use that one a lot. “You folks buy the new Iphone the second it comes out, you can afford this”. Works every time, as long as I don’t over use it. From: [email protected] [mailto:[email protected]] On Behalf Of J- P Sent: Tuesday, July 8, 2014 8:48 PM To: [email protected] Subject: RE: [NTSysADM] Locking IE, GPP clarification Given all the variables, i think the edge (firewall/webfilter) is the way to go, heck they can spend 800.00 dollars on cellphone when they travel, I think I can make an argument for the filter :) Jean-Paul Natola From: [email protected] To: [email protected] Subject: RE: [NTSysADM] Locking IE, GPP clarification Date: Tue, 8 Jul 2014 20:42:53 -0400 No -executables on network shares (FSRM) USB -Disabled Wget -not a native windows app FTP -(Not installed as a Role/Feature , no command prompt, and that's why I'm trying to lock the browser down in the first place) so they cant open IE and get to ftp://URL.ACCESS.DENIED) and no installation rights should make the above a moot point They may have MBA's in finance, but they still dont realize a wireless mouse requires batteries :) Date: Tue, 8 Jul 2014 20:15:58 -0400 Subject: Re: [NTSysADM] Locking IE, GPP clarification From: [email protected] To: [email protected] FTP? Network share? USB stick? Wget? On Tue, Jul 8, 2014 at 6:23 PM, J- P <[email protected]> wrote: if they have no install rights, how can they grab another browser? and it is only 3 users, not knowledgeable, just not very savvy Jean-Paul Natola Date: Tue, 8 Jul 2014 17:30:49 -0400 Subject: Re: [NTSysADM] Locking IE, GPP clarification From: [email protected] To: [email protected] I would do it at the network edge with appropriate firewall rules. There's nothing stopping a knowledgeable user from grabbing another browser and using that to go wherever they want. On Tue, Jul 8, 2014 at 5:17 PM, J- P <[email protected]> wrote: Hi all, I'm trying tolock down internet access on a new server, I ONLY want the server (TS) to access the webex site for our software vendors i.e; vendor.webex.com vendor2.webex.com The server is 2008r2 running IE 11, so the question i , do i do it via Windows Components\Internet Explorer\Internet Control Panel\Security Page. Zone Assignment or GPP , User, Preferences>Windows Settings>Control Panel Settings > Internet Settings I have seen documentation that point to both any help would be great thakns
