Blocking an individuals internet...

[mrbios]

What is your method for doing it?

 

Until recently we were just moving the user in to a "no internet" folder in AD with a GP applied to it, but i've recently created an ISA rule applied to a group so i can just add a user into the group to block there internet rather than moving people about in AD

 

Whats your method?

[localzuk]

I use your prior method. A 'No Internet' OU in the AD which removes the proxy settings and removes shortcuts to the web browser.

[K.C.Leblanc]

I use your prior method. A 'No Internet' OU in the AD which removes the proxy settings and removes shortcuts to the web browser.

 

Same here, except instead of removing IE shortcuts we keep them and have the home page set to one asking the indivisual to see the appropriate member of SLT.

 

We don't have any long term internet bans, access is given back once the matter has been discussed with the assistant head, or on a second occasion the deputy head.

[zag]

I use an OU with the proxie set to "denied". Works well

[Guest TheLibrarian]

We use the group method.

 

In fact we have two groups, one for AUP breaches which is strictly controlled, and one that the teachers can add students to (with a bespoke utility) that gets cleared 5 minutes before the end of each lesson.

[burgemaster]

"Denied Internet" user group here with Group policy changing the proxy, also set there homepage to an internal "You have been banned from the internet for blah blah" and a link to a copy of the "Student AUP"

 

Works well

[gjdb]

How does your GPO block/change proxy for other browsers like, firefox, chrome, opera etc. ??

[danrhodes]

We just change their setting on Censornet :-)

[RTFM]

Temporary Bans feature in SmoothWall is what we do, before that we did something similar to you with ISA.

[3s-gtech]

An OU in Group Policy here. So then they go borrow someone else's login to play games >

[jcollings]

We don't block it anymore. We used to by creating a GPO with a false proxy and applying it to a specific security group but we gave up banning people from the internet and the network and just brought all "IT Offences" in line with our code of conduct so if they do something wrong it's punished like any other offence.

[rush_tech]

We use dansguardian filter groups. A nice educational group of very educational websites

[maark]

A cheap way of providing resticted access - buy a 50 user licence for school guardian - force internet banned students through the proxy for that with only an approved list of sites and a custom block page

[ict_support]

one word Smoothwall or is that two

[danrhodes]

one word Smoothwall or is that two

 

Thinks its one?

[tom_newton]

Just one. Mostly with a capital W if we can be bothered, which sometimes we can't

 

@RTFM - do you use the portal to let teaching staff at the temp bans too?

[RTFM]

@RTFM - do you use the portal to let teaching staff at the temp bans too?

 

As if, takes away all the fun from me doing it!

[SpuffMonkey]

We do it with SmoothWall - then we can allow them on a tightly controlled whitelist rather than a complete ban, though we still get teachers coming in all the time saying that little Johnny absolutely needs to get to Polish game sites to complete his coursework...

[tom_newton]

I like that style - for those thinking "WTF, he has temp whitelist!?" - it is possible to change the behaviour of "banned group" to pretty much anything you want.

[burgemaster]

How does your GPO block/change proxy for other browsers like, firefox, chrome, opera etc. ??

 

They get IE, thats it... and obviously have not got the privelidges to install or run any portable EXEs etc

[BrotherSidious]

We add pupils to a group. That group is then used on our ISA server with a rule to allow access only to whitelisted sites.

 

This way we ban their free use of the internet but they can still access sites the school have signed up for. This seems to be acceptable to teaching staff as a blanket internet ban caused issues in the classroom when some lessons were based on the use of a website that various departments had subscribed to.

[jgcracknell]

We use E2BN's Protex setup. Excellent. They are producing a VMWare version too. Filters and allows you to put a student into a security group to block them or put them in walled gardens to change their filtering from secondary to primary level!