+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Thread, Windows 2003 Server Restricted Access in Technical; Hi, I have a windows 2003 server and there are loads of users using that machine. I have created multiple ...
  1. #1

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Windows 2003 Server Restricted Access

    Hi,
    I have a windows 2003 server and there are loads of users using that machine.
    I have created multiple accounts for the users.
    What i want is that i want to restrict the access to the Internet for some users.
    One of the way i think that can be done is making a log on script, which i dont know.
    Please suggest me some other way for to do this, or may be a log on script will also do in which we can do a face proxy setting for each user.

    Thanks a ton in advance.

    Deepak Surana

  2. #2

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,539
    Thank Post
    830
    Thanked 609 Times in 412 Posts
    Rep Power
    432

    Re: Windows 2003 Server Restricted Access

    Not sure how effective this will be (if at all)

    Create a group (say: "G No Internet"), and add the relevent users to that group
    Then add the group to the "C:\Program Files\Internet Explorer\" folder and set the Deny Permissions for that group..

  3. #3

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by Gatt
    Not sure how effective this will be (if at all)

    Create a group (say: "G No Internet"), and add the relevent users to that group
    Then add the group to the "C:\Program Files\Internet Explorer\" folder and set the Deny Permissions for that group..


    That does no work...

  4. #4

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by Gatt
    Not sure how effective this will be (if at all)

    Create a group (say: "G No Internet"), and add the relevent users to that group
    Then add the group to the "C:\Program Files\Internet Explorer\" folder and set the Deny Permissions for that group..
    But i also tried the same permission set on internetexplorer executable file and it worked perfectly fine.
    But here comes the another issue, the user can opne windows explorer and then type in the website name in address bar and access internet.
    Sounds funny but i just tried it.

  5. #5
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,938
    Thank Post
    114
    Thanked 272 Times in 250 Posts
    Rep Power
    104

    Re: Windows 2003 Server Restricted Access

    Put IE7 on the machine then theres one other DLL you could try permissions on as well is mshtml.dll or something similar named.

  6. #6

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by ChrisH
    Put IE7 on the machine then theres one other DLL you could try permissions on as well is mshtml.dll or something similar named.
    Thanks sir,
    its working but it has now created another problem...
    the users cant access outlook now.
    How to tackle with it.?

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,385
    Thank Post
    797
    Thanked 1,585 Times in 1,388 Posts
    Blog Entries
    10
    Rep Power
    427

    Re: Windows 2003 Server Restricted Access

    What you could do is make a special OU for the users assign a group policy to that and in that group policy set some proxy settings to an non existent proxy server. Therefore the computer cannot find the internet. Then the users have full use of the computer including outlook (unless there are other policies in force)

  8. #8

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by FN-Greatermanchester
    What you could do is make a special OU for the users assign a group policy to that and in that group policy set some proxy settings to an non existent proxy server. Therefore the computer cannot find the internet. Then the users have full use of the computer including outlook (unless there are other policies in force)
    Can you please provide me with the steps for the same or any link in which i can find similar thing.

    Thanks.

  9. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,385
    Thank Post
    797
    Thanked 1,585 Times in 1,388 Posts
    Blog Entries
    10
    Rep Power
    427

    Re: Windows 2003 Server Restricted Access

    OK, just a qucik question are you on a domain or a stand alone machine here?

  10. #10
    Heebeejeebee's Avatar
    Join Date
    Nov 2006
    Location
    Intergalactic Cruise
    Posts
    1,036
    Thank Post
    68
    Thanked 74 Times in 58 Posts
    Rep Power
    34

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by FN-Greatermanchester
    OK, just a qucik question are you on a domain or a stand alone machine here?
    ... or even have a proxy?

    We go the OU route and place banned users in a group where the proxy is set to the local host (as suggested).

    HBJB

  11. #11

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    8,941
    Thank Post
    232
    Thanked 1,510 Times in 1,206 Posts
    Rep Power
    328

    Re: Windows 2003 Server Restricted Access

    I agree with comments written above. Create a new OU and enter duff proxy information. Even more importantly, enforce it so if they go into Internet Options, proxy settings are greyed out. Alternatively deny access to Internet Options altogether.

    As for MS Outlook or Outlook Express, use software restriction policies, supported in XP/2003 AD. Enter the file path and executable for Outlook/Outlook Express and users will receive a message that software restriction policies are in place. I also use the same technique for MSN Messenger and IE Toolbars so they'll never be able to run. Hope this helps.

  12. #12

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by FN-Greatermanchester
    OK, just a qucik question are you on a domain or a stand alone machine here?
    Its on a domian.
    Actually this machine is a server whihc has many accounts, and each user logs onto machine and also works on it as they have thin client.

  13. #13

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by Michael
    I agree with comments written above. Create a new OU and enter duff proxy information. Even more importantly, enforce it so if they go into Internet Options, proxy settings are greyed out. Alternatively deny access to Internet Options altogether.

    As for MS Outlook or Outlook Express, use software restriction policies, supported in XP/2003 AD. Enter the file path and executable for Outlook/Outlook Express and users will receive a message that software restriction policies are in place. I also use the same technique for MSN Messenger and IE Toolbars so they'll never be able to run. Hope this helps.
    Thats gr8,
    but can you please tell me the steps to do the same..

    Thanks.

  14. #14

    Join Date
    Oct 2007
    Posts
    11
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows 2003 Server Restricted Access

    Quote Originally Posted by Heebeejeebee
    Quote Originally Posted by FN-Greatermanchester
    OK, just a qucik question are you on a domain or a stand alone machine here?
    ... or even have a proxy?

    We go the OU route and place banned uses in a group where the proxy is set to the local host (as suggested).

    HBJB
    I didnt got what exactly you mean to say. Please explain.

  15. #15

    Join Date
    Mar 2007
    Posts
    307
    Thank Post
    3
    Thanked 9 Times in 8 Posts
    Rep Power
    16

    Re: Windows 2003 Server Restricted Access

    Are you talking about users logging onto the client machines or the server directly? For users logging into client machines you can set the ADM templates to non existant proxy servers (as suggested). Alternatively if you have been using scripts to set the proxy address you can call the script at logon and change it to the non existant proxy that way. Either way you will need to make sure users cannot change it back.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Word 2003 Hyperlinks restricted
    By mrbios in forum Windows
    Replies: 8
    Last Post: 18th June 2010, 09:01 AM
  2. Restricted Internet Access
    By deepusurana in forum Windows
    Replies: 3
    Last Post: 23rd October 2007, 04:51 PM
  3. Replies: 5
    Last Post: 5th July 2007, 11:43 PM
  4. Windows Server 2003 File Server Resource Manager
    By mrforgetful in forum Windows
    Replies: 1
    Last Post: 17th June 2007, 01:51 PM
  5. Replies: 15
    Last Post: 2nd May 2007, 05:38 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •