Restrict Internet Access?

[icecube]

How would you go about restricting internet access to certain Groups & granting access to other Groups? Server currently has 2 network connections - 1 going to switch where all clients connected to - 1 going to DSL router for internet access

[icecube]

Came across this, will try in the morning. Step 1: Create new group and apply the policy 1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet. 2. Right-click No Internet and press Enforced to check it. 3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying. 4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy. 2. Right-click Internet Explorer Maintenance and press Preference Mode. NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode. 3. Navigate through Connections and double-click Proxy Settings (Preference Mode). 4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. 5. Type 127.0.0.1 into Address of proxy and 80 into Port. 6. Press OK. 7. Close the No Internet group Policy. Edited January 22, 2018 by icecube

[eddyc]

Came across this, will try in the morning. Step 1: Create new group and apply the policy 1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet. 2. Right-click No Internet and press Enforced to check it. 3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying. 4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy. 2. Right-click Internet Explorer Maintenance and press Preference Mode. NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode. 3. Navigate through Connections and double-click Proxy Settings (Preference Mode). 4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. 5. Type 127.0.0.1 into Address of proxy and 80 into Port. 6. Press OK. 7. Close the No Internet group Policy.

 

This is exactly how we do it. Of course that same GPO should be configured to stop the user accessing proxy settings else they can change them to what they should be

[slinta]

Internet Explorer Maintenance ---this option is gone in my area ( no longer listed server 2012 and IE 11), is there another way to do this?

[Davit2005]

Internet Explorer Maintenance ---this option is gone in my area ( no longer listed server 2012 and IE 11), is there another way to do this?

 

You could set a fictitious Proxy server by a deployed registry setting in a GPO and fillter this to the Windows Security group via permissions on the GPO. Test, test and test jus to make sure results are as expected :-) .

[LeMarchand]

Internet Explorer Maintenance ---this option is gone in my area ( no longer listed server 2012 and IE 11), is there another way to do this?

 

Try User/Preferences/Control Panel Settings/Internet Settings and add a new IE 10 policy with the fake proxy configured. Don't forget to do this as well:

 

Of course that same GPO should be configured to stop the user accessing proxy settings else they can change them to what they should be

 

User/Policies/Admin Templates/Windows Components/IE