Exam Accounts & Internet

[ITGURU]

Hi All

Does anyone use GPO here for exam accounts to disable the internet i.e setting an invalid proxy so they get nothing at all?

If so, do you have to create 2 policies, one for enabled internet accounts and one for disabled account?

I'd like to add the exam user accounts to either 'block internet access' or 'enable internet access' to switch between them as part of the exam need it enabled, and some disabled.

If anyone could share their setup, be much appreciated.

thanks

[thimon]

It’s not GPO related, however we’ve got a No Internet Access group in our Internet filtering provider, which one of our exams accounts is in. Does the job. Maybe that’s an option for you?

[Guest Guest]

We use AppLocker

[ITGURU]

It’s not GPO related, however we’ve got a No Internet Access group in our Internet filtering provider, which one of our exams accounts is in. Does the job. Maybe that’s an option for you?

 

No unfortunately not. We do have a block internet AD group which will block 90% of sites, but some sites we have a bypass for, and these still get allowed.

[ITGURU]

I've now got it working as i'd like using GPO - had a GPO conflict , but now seems to work! A single GPO with internet disabled with fake proxy address in with security filtering - apply if member of 'block internet access' If it's not a member then the normal policy gets applied!

[KevinB]

We block internet connectivity for exam users using Impero rather than GP. They are all in a "No internet" AD group that's a member of the "Internet Banned" Impero group.