disabling Internet Access help!

[Gardinho]

Hi Guys,

 

I have a big problem. If we have a problematic pupil in our school, we remove internet access. We control this through a 'no internet' organizational unit in AD and a group policy on windows server 2003 by disabling iexplore.exe and having incorrect proxy settings in the group policy.

 

Unfortunately, they have found several ways round this. They can get in through online help in programmes on the start menu, such as: real player, any office program, outlook express, winzip, adobe 8, windows defender, pro desktop and sophos.

 

They have only just worked this out so I need to sort it out ASAP.

 

Any advice will be greatly appreciated.

 

Thanks,

 

David Gardner

IT Technician

Beaconhill School

[srochford]

What proxy server are you using? We use ISA 2000 and ISA 2004 and configure the "allow access to the web" to only work for users in a specific group.

 

If we want to block internet access then we just take them out of that security group - nothing has to change on the client and whatever they use to try and get to the web has to go through the proxy which will block them.

 

The only problem is that it's not "instant" - group changes only take effect at logon.

 

If you're using ISA and you want it to be instant then add another rule which says "don't allow internet for these users" Make that a list of people to block and you can just add/remove users with instant effect.

[Gardinho]

Hi Steve,

 

We have found a solution to the problem. We are currently testing three different monitoring software, securus, policy central and impero. Impero has the ability to disable per user applications. Whenever the user with no internet access opens one of the online help articles they immedietely get a popup informing them of the restrictions. I have to say, in my experience this is the best monitoring software available.

 

Thanks anyway,

 

David

[apoth0r]

we use Impero, fantastic for blocking the internet on a whim (poor behaviour takes away the ability to go on the internet etc).

Love the program and the recent release of version 2 makes it an even better product to take a look at, high recommendations here.