+ Post New Thread
Results 1 to 5 of 5
Internet Related/Filtering/Firewall Thread, ISA Server - Blocking Laptops in Technical; Hi all, We have recently given our science department 20 laptops and a trolley. All the students do is play ...
  1. #1
    Crispin's Avatar
    Join Date
    Dec 2008
    Location
    Essex
    Posts
    361
    Thank Post
    76
    Thanked 28 Times in 25 Posts
    Rep Power
    20

    ISA Server - Blocking Laptops

    Hi all,

    We have recently given our science department 20 laptops and a trolley. All the students do is play games and stream video. They're killing the access points so we need to prevent internet access on these machines.

    We are running the old ISA 2000 for our proxy which I'm not too farmiliar with.

    Can I add a Computer group rather than a user group to our 'Banned Internet' access rule? How would I go about this? Is there an alternative way to stop them from accessing the proxy. I just need a way that I can 'break' their IE either through the proxy/group policy.

    I'll do some googling in the mean time while i eagerly await a response

    Thanks

    Chris

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,223
    Thank Post
    874
    Thanked 2,717 Times in 2,302 Posts
    Blog Entries
    11
    Rep Power
    780
    Unless the laptops have static IPs I don't think that ISA 2k can block them like that as it is really primitive in comparision to the latter ISA products. You can block an ip range though. The easiest way to block the laptops if they are domain joined would be to add a policy that sets the proxy server to an invalid address applied only to those laptops. Or block port 80 and 443 on the AP

  3. Thanks to SYNACK from:

    Crispin (25th March 2009)

  4. #3

    Join Date
    Nov 2006
    Location
    Milan, Italy
    Posts
    38
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    16

    Proxy

    You could use GP to set their proxy settings to some bogus address or use and autorpoxy script pac file to identify the computer and block it's access.

    Im assuming you still want them to access network resources but not the internet correct?

  5. Thanks to sreiach from:

    Crispin (25th March 2009)

  6. #4
    Crispin's Avatar
    Join Date
    Dec 2008
    Location
    Essex
    Posts
    361
    Thank Post
    76
    Thanked 28 Times in 25 Posts
    Rep Power
    20
    Im assuming you still want them to access network resources but not the internet correct?
    That is correct yes.

    I will try applying a policy pointing them to an incorrect address. Thanks for the advice.

  7. #5

    Join Date
    Nov 2006
    Location
    Milan, Italy
    Posts
    38
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    16

    IE

    Another idea would be to use Group Policy and block internet explorer all together. They would still be able to browse the network and print etc.

SHARE:
+ Post New Thread

Similar Threads

  1. ISA 2006 blocking access to IP addresses
    By TheCrust in forum Windows
    Replies: 6
    Last Post: 16th January 2009, 01:57 PM
  2. ISA server blocking https
    By DSapseid in forum Windows
    Replies: 6
    Last Post: 9th January 2009, 03:07 PM
  3. ISA 2006 + blocking internet for AD group
    By Paid_Peanuts in forum Windows
    Replies: 8
    Last Post: 7th December 2007, 06:46 PM
  4. ISA 2004 Blocking Groups
    By drewinc in forum Windows
    Replies: 4
    Last Post: 11th June 2007, 12:37 PM
  5. ISA 2004 Filetype blocking
    By indiegirl in forum Windows
    Replies: 2
    Last Post: 21st March 2006, 03:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •