You can use GPO to point IE to a non-existent proxy server. That will allow IE to run, but will prevent surfing the web.
John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us -----Original Message----- From: Ben Scott [mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2008 9:38 AM To: NT System Admin Issues Subject: Re: Group Policy question On Fri, Mar 7, 2008 at 9:16 AM, Len Hammond <[EMAIL PROTECTED]> wrote: > Not haveing spent much time with Policies I am "assuming" that there is > a policy that can be set to either deny the machines access to the Internet > or to deny the shop floor users access to the Internet. There's a butt-load of options relating to Microsoft Internet Explorer, under Administrative Templates -> Windows Components -> Internet Explorer. Many exist for both the User and Computer sides. You can disable MSIE entirely, remove or lock various Internet Options, set defaults, and do other fun things. One problem is if your shop floor computers also need MSIE to view local HTML files, internal web servers, and the like. If so, disabling MSIE is too much. In that case, you can set-up a bogus proxy server, add the local stuff to the exceptions list, and then lock out changes. Be aware that all of this doesn't actually prevent access to the Internet -- it simply controls MSIE. If the users have the knowledge and ability to install other software (like Firefox), they can still get on the 'net. Only a firewall can really control Internet access. > Anyone have any favorite reference books on Policy stuff? I have a book titled "Windows 2000 - Group Policy, Profiles, and IntelliMirror". It was useful when I was learning this stuff back when 2000 first came out. It's somewhat dated now, and better treatments have probably been published since anyway. -- Ben ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
