+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 30
How do you do....it? Thread, Blocking Internet Access in Technical; OK - currently we have a group called Webdeny - if you're in that security group IE won't run for ...
  1. #1

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Blocking Internet Access

    OK - currently we have a group called Webdeny - if you're in that security group IE won't run for you and the proxy server is changed to a bogus one. This has worked fine for ages but students seem to have found a way round it (not sure what yet).

    So 2 questions:
    1. How are they getting round it
    2. What ways do you use to block specific students when they've been bad boys (or girls)

    Cheers

  2. #2

    tech_guy's Avatar
    Join Date
    May 2007
    Location
    That little bit in the middle of Little Old England
    Posts
    8,135
    Thank Post
    1,908
    Thanked 1,343 Times in 742 Posts
    Blog Entries
    3
    Rep Power
    395

    Re: Blocking Internet Access

    Are they using Mozilla FF on a USB stick?

  3. #3
    richard.thomas's Avatar
    Join Date
    Sep 2007
    Posts
    491
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    16

    Re: Blocking Internet Access

    Loads of different ways, so we're gonna need abit more information.

    Can pupils run .exes from their home drive of removable media? If so they could be using another browser from there...

    Does your proxy do transparent proxying? It's possible that without any proxy information they may be able to browse the web using another browser?

    I'm sure other people have points to add...

  4. #4

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Re: Blocking Internet Access

    Quote Originally Posted by tech_guy
    Are they using Mozilla FF on a USB stick?
    No - this guy was using IE. We have it so they can't run stuff from USB drives etc.

  5. #5

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Re: Blocking Internet Access

    Quote Originally Posted by richard.thomas
    Loads of different ways, so we're gonna need abit more information.

    Can pupils run .exes from their home drive of removable media? If so they could be using another browser from there...

    Does your proxy do transparent proxying? It's possible that without any proxy information they may be able to browse the web using another browser?

    I'm sure other people have points to add...
    No it was IE and they can't run stuff from home drives or flash drives.
    No it has to have the proxy info in there.

  6. #6
    richard.thomas's Avatar
    Join Date
    Sep 2007
    Posts
    491
    Thank Post
    5
    Thanked 11 Times in 10 Posts
    Rep Power
    16

    Re: Blocking Internet Access

    Interesting... I presume since he's been added to your blocking OU the pupil has logged off and logged back on?

  7. #7

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Re: Blocking Internet Access

    Quote Originally Posted by richard.thomas
    Interesting... I presume since he's been added to your blocking OU the pupil has logged off and logged back on?
    Yes - he's been blocked for ages. Very irritating though.

  8. #8

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,614
    Thank Post
    514
    Thanked 2,441 Times in 1,889 Posts
    Blog Entries
    24
    Rep Power
    831

    Re: Blocking Internet Access

    How about using a macro to call IE from Excel? That always seems to be a way round things.

  9. #9
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,261
    Thank Post
    646
    Thanked 283 Times in 204 Posts
    Rep Power
    104

    Re: Blocking Internet Access

    I would deny access by changing the proxy settings to point somewhere that does not exist. Then block access to the settings In IE. All done by AD.

    You might be able to bypass this with a .reg file, but this depends on your setup.

  10. #10

    Join Date
    Feb 2006
    Location
    South Cumbria
    Posts
    199
    Thank Post
    26
    Thanked 29 Times in 24 Posts
    Rep Power
    22

    Re: Blocking Internet Access

    How about setting up a logon script that alerts you when he logs on then using a remote viewer to see what he's doing?

  11. #11


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 434 Times in 353 Posts
    Rep Power
    126

    Re: Blocking Internet Access

    Depending on you set up, it might be possible for users who have a localy cached profile to log on with the network cable unpluged. Doing this stops GPOs being applied. If there is a proxy specified in the default user profile he'd be able to use the net.

    Another possibility is he's using someone elses account.

    Spuid & DansGuardian or an older version of censornet (when it was still free) are two free Linux based solutions for net filtering.

  12. #12

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    16

    Re: Blocking Internet Access

    you haven't upgraded from IE6 to IE7 have you? Aren't the Adm templates different for those versions? Could it be that you have setup the Webdeny for IE6 and it's not working on IE7?

  13. #13

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Re: Blocking Internet Access

    Quote Originally Posted by ICT_GUY
    I would deny access by changing the proxy settings to point somewhere that does not exist. Then block access to the settings In IE. All done by AD.

    You might be able to bypass this with a .reg file, but this depends on your setup.
    That's exactly how it is configured.

  14. #14

    Join Date
    Nov 2006
    Location
    Kendal
    Posts
    1,555
    Thank Post
    112
    Thanked 177 Times in 144 Posts
    Rep Power
    71

    Re: Blocking Internet Access

    Quote Originally Posted by Hecate
    How about setting up a logon script that alerts you when he logs on then using a remote viewer to see what he's doing?
    Thanks guys - I've got a few things to try from this. In terms of a script to let me know when someone logs on - does anyone have one please?

  15. #15
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    33

    Re: Blocking Internet Access

    Logging on as someone else? The oldies are the best!

    EDIT: For the script - are your current login scripts vbs/bat/kix/somethingelse?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. ISA 2006 + blocking internet for AD group
    By Paid_Peanuts in forum Windows
    Replies: 8
    Last Post: 7th December 2007, 06:46 PM
  2. disabling Internet Access help!
    By Gardinho in forum Windows
    Replies: 3
    Last Post: 5th July 2007, 02:17 PM
  3. Block internet access
    By Dean in forum Network and Classroom Management
    Replies: 20
    Last Post: 14th February 2007, 10:45 PM
  4. K9 free parental internet blocking software for home use
    By beeswax in forum Comments and Suggestions
    Replies: 1
    Last Post: 29th June 2006, 08:03 PM
  5. Internet Blocking Service
    By ajbritton in forum Learning Network Manager
    Replies: 4
    Last Post: 26th January 2006, 08:31 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •