Block internet to Internet Explorer 7 on Vista

[BSOD]

At the moment I've got a banned internet group which reads a group policy that uses a dummy proxy. This works, however when the user sees this page can not be displayed, the user can click the link on the page that says "Diagnose Connections problems". As we have wpad in place when the banned user clicks on the diagnose link internet explorer ticks the "Automatically detect settings" box even though this is disabled in the banned policy. This then allows them to browse the internet as normal.

We're tried to find a group policy for this and even installed the latest admin templates no joy.

The reason we're tried to avoid banning the iexplore.exe is because if the student is using Dreamweaver and wants to test their page.

Help!!!

[AIT]

At the moment I've got a banned internet group which reads a group policy that uses a dummy proxy. This works, however when the user sees this page can not be displayed, the user can click the link on the page that says "Diagnose Connections problems". As we have wpad in place when the banned user clicks on the diagnose link internet explorer ticks the "Automatically detect settings" box even though this is disabled in the banned policy. This then allows them to browse the internet as normal.

We're tried to find a group policy for this and even installed the latest admin templates no joy.

The reason we're tried to avoid banning the iexplore.exe is because if the student is using Dreamweaver and wants to test their page.

Help!!!

Do you use ISA:
If you use isa server just create a rule that blocks that group. (redirects to blocked page)

[NikChillin]

can't you use your proxy server and put them in a restricted group?

[BSOD]

Unfortunately we don't have an ISA server and our proxy server is CLEOs.

[AIT]

Ok then so we cant block it from the proxy. how about if you uncheck in group policy automatic browser configuration.

also try Disabling: under uses, windows components, internet explorer, internet settings, advanced settings, internet connection wizard.

also try disabling some browser menues.

[K.C.Leblanc]

It might be worth trying this, it's a slightly odd phenomenom I noticed.

Set up IIS or Apache and serve out a web page (maybe one saying OI PILLOCK) as the default page. Then set the server's IP and port 80 as the naughty user's proxy.

It should just serve the pillock page no matter what page they request.

[AIT]

It might be worth trying this, it's a slightly odd phenomenom I noticed.

Set up IIS or Apache and serve out a web page (maybe one saying OI PILLOCK) as the default page. Then set the server's IP and port 80 as the naughty user's proxy.

It should just serve the pillock page no matter what page they request.

Genius, Tried that in my test environment this morning it worked perfectly!...
Now I just have to think of a use in my school ;-)