Disabling internet for certain domain users

Discussion in 'Windows Server Systems' started by Heeter, Feb 5, 2010.

  1. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    Hi all,

    Wondering how to disable a domain user/computer from using IE on their workstation through the Active directory, but still have access to domain network.


    Thanks

    Heeter
     
  2. Bootsy

    Bootsy Huh?

    Messages:
    1,124
    Location:
    Miami, Fl
    easiest way to do this is to manually input their DNS settings to just point to a domain controller and thats it... now, that DC can only have itself as a DNS entry as well..

    Ive done it for some people in my domains and it seems to work well.

    If you ultimately need to have them access certain sites, add them to their hosts file.
     
  3. ZeroHour

    ZeroHour ho3 ho3 ho3

    Messages:
    1,118
    Location:
    Scotland
    To block IE specifically just put a deny permission on iexplorer.exe with a group they are a member of. Say you make a group "no internet" and then use group policy to put the permission out to the clients with the deny rule. You just add the user to that group, when they log back in they cant run IE.
    Or are you looking to block the internet full stop?
     
  4. Heeter

    Heeter Overclocked Like A Mother

    Messages:
    2,732
    No, just two workstations out of the 75 or so. Doesn't matter who the user is on it.