ISA Server - Blocking Laptops

[Crispin]

Hi all,

 

We have recently given our science department 20 laptops and a trolley. All the students do is play games and stream video. They're killing the access points so we need to prevent internet access on these machines.

 

We are running the old ISA 2000 for our proxy which I'm not too farmiliar with.

 

Can I add a Computer group rather than a user group to our 'Banned Internet' access rule? How would I go about this? Is there an alternative way to stop them from accessing the proxy. I just need a way that I can 'break' their IE either through the proxy/group policy.

 

I'll do some googling in the mean time while i eagerly await a response

 

Thanks

 

Chris

[SYNACK]

Unless the laptops have static IPs I don't think that ISA 2k can block them like that as it is really primitive in comparision to the latter ISA products. You can block an ip range though. The easiest way to block the laptops if they are domain joined would be to add a policy that sets the proxy server to an invalid address applied only to those laptops. Or block port 80 and 443 on the AP

[sreiach]

You could use GP to set their proxy settings to some bogus address or use and autorpoxy script pac file to identify the computer and block it's access.

 

Im assuming you still want them to access network resources but not the internet correct?

[Crispin]

Im assuming you still want them to access network resources but not the internet correct?

 

That is correct yes.

 

I will try applying a policy pointing them to an incorrect address. Thanks for the advice.

[sreiach]

Another idea would be to use Group Policy and block internet explorer all together. They would still be able to browse the network and print etc.