+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 Thread, Group Policy Structure in Technical; Anybody got a successful school group policy structure that they'd like to share? Do you have one policy linked to ...
  1. #1

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Group Policy Structure

    Anybody got a successful school group policy structure that they'd like to share?

    Do you have one policy linked to all students? A number of individual policies linked to all students? Different policies linked to different year groups?

    Also, we currently have a student policy that provides proxy server details. How do we create a policy to block certain students internet access when they are linked to the policy that supplies those details? Is a separate policy that only acts upon users in a 'blocked internet' security group going to work?

    Any advice would be really appreciated!!

  2. #2

    Join Date
    Feb 2007
    Location
    Four Oaks
    Posts
    283
    Thank Post
    37
    Thanked 10 Times in 9 Posts
    Rep Power
    21
    in regards to blocking internet, i used to have a OU below the students Ou ( so it picked up the Normal student policy) applied to the New Ou i would have a policy applied that would just set an incorrect proxy..or just blank. As this policy is applied last it would stop the internt from being used. then all i would do is move the student to that OU when i wanted them blocked from the internet.

    hope that makes sense

  3. Thanks to mtdmitchell from:

    s1mon321 (3rd April 2011)

  4. #3

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,800
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    I have it set so we have a student ou and a staff ou and a computers ou - students have on main group policy which supplies most of the settings then further down the tree there are some specifics for year groups etc.

    as for internet i just add individual users to the blocked lists in dansguardian.

  5. Thanks to glennda from:

    s1mon321 (3rd April 2011)

  6. #4

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Cheers for all the advice folks.

    We have just created another OU for the 'blocked internet' students and have linked an incorrect proxy policy to it. Any students in that OU can no longer access the internet :-)............unless they use a PC that they've logged onto before :-( If they do that then the internet is still accessible. Any ideas??

  7. #5

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,800
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    what proxy are you using?

    I find it's easier blocking it at that end rather then on the client.

  8. #6

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Unfortunately its through the local authority and we don't have access rights to make changes.

  9. #7

    Join Date
    Jul 2010
    Location
    Leicester
    Posts
    31
    Thank Post
    19
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Any ideas why this doesn't seem to be taking effect on machines that the 'blocked users' have logged onto before??

  10. #8
    Hedghog's Avatar
    Join Date
    Jul 2006
    Location
    North Wales
    Posts
    194
    Thank Post
    35
    Thanked 17 Times in 16 Posts
    Rep Power
    37
    Hi
    This sometimes happens when the PC is not deleting local profiles on exit. It can also happen if the PC is not updating Group Policy - try running "gpupdate /force /boot" at the command line and then testing.

  11. Thanks to Hedghog from:

    s1mon321 (5th April 2011)

  12. #9

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,800
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    If you are running XP try installing the User hive Cleanup Service from MS.

    Also look at implementing a local proxy (will help with speed to well webpages used a lot (like google homepage))

    there are lots of free softwares out there which will do it such as smoothwall express squid/dansguardian.

  13. Thanks to glennda from:

    s1mon321 (5th April 2011)

  14. #10
    eddyc's Avatar
    Join Date
    Aug 2008
    Location
    Bristol
    Posts
    432
    Thank Post
    98
    Thanked 47 Times in 43 Posts
    Rep Power
    21
    We have an internal ISA here before our connection to our LEA. We have a group which is set to deny internet access called banned users and we simply add any banned pupils into this group.
    This does not then matter whether the pupil has logged in before or not as the ISA server blocks in it real time. It's also great for caching frequently visited websites

  15. Thanks to eddyc from:

    s1mon321 (13th April 2011)

SHARE:
+ Post New Thread

Similar Threads

  1. Group policy
    By pedster666 in forum Hardware
    Replies: 5
    Last Post: 27th February 2008, 10:03 AM
  2. Group policy etc
    By moiebus in forum Wireless Networks
    Replies: 20
    Last Post: 8th November 2006, 11:48 PM
  3. Group Policy
    By faza in forum Wireless Networks
    Replies: 27
    Last Post: 5th July 2006, 06:34 AM
  4. Group Policy
    By faza in forum Windows
    Replies: 15
    Last Post: 23rd May 2006, 09:39 AM
  5. Group Policy
    By faza in forum Wireless Networks
    Replies: 2
    Last Post: 23rd May 2006, 07:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •