Thanks guys, I'll look into both of those today. I have been out of town with no Internet or cell service all weekend but am now ready to get into this one.
Thanks again. Len On Fri, Mar 7, 2008 at 10:43 AM, John Hornbuckle < [EMAIL PROTECTED]> wrote: > You can use GPO to point IE to a non-existent proxy server. That will > allow IE to run, but will prevent surfing the web. > > > > John Hornbuckle > MIS Department > Taylor County School District > 318 North Clark Street > Perry, FL 32347 > > www.taylor.k12.fl.us > > > > > -----Original Message----- > From: Ben Scott [mailto:[EMAIL PROTECTED] > Sent: Friday, March 07, 2008 9:38 AM > To: NT System Admin Issues > Subject: Re: Group Policy question > > On Fri, Mar 7, 2008 at 9:16 AM, Len Hammond <[EMAIL PROTECTED]> > wrote: > > Not haveing spent much time with Policies I am "assuming" that there > is > > a policy that can be set to either deny the machines access to the > Internet > > or to deny the shop floor users access to the Internet. > > There's a butt-load of options relating to Microsoft Internet > Explorer, under Administrative Templates -> Windows Components -> > Internet Explorer. Many exist for both the User and Computer sides. > You can disable MSIE entirely, remove or lock various Internet > Options, set defaults, and do other fun things. > > One problem is if your shop floor computers also need MSIE to view > local HTML files, internal web servers, and the like. If so, > disabling MSIE is too much. In that case, you can set-up a bogus > proxy server, add the local stuff to the exceptions list, and then > lock out changes. > > Be aware that all of this doesn't actually prevent access to the > Internet -- it simply controls MSIE. If the users have the knowledge > and ability to install other software (like Firefox), they can still > get on the 'net. Only a firewall can really control Internet access. > > > Anyone have any favorite reference books on Policy stuff? > > I have a book titled "Windows 2000 - Group Policy, Profiles, and > IntelliMirror". It was useful when I was learning this stuff back > when 2000 first came out. It's somewhat dated now, and better > treatments have probably been published since anyway. > > -- Ben > > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ > ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ > > ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ > ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ > -- Len Hammond Hammond Enterprises [EMAIL PROTECTED] ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
