Go Back   Tech Support Forum > Microsoft Support > Windows NT/2000/2003, 2008 and 2012 Server

block internet access through group policy in windows server 2003

This is a discussion on block internet access through group policy in windows server 2003 within the Windows NT/2000/2003, 2008 and 2012 Server forums, part of the Tech Support Forum category. I want to block internet access in some of the domain users using group policy in windows server 2003. So


Closed Thread
 
Thread Tools Search this Thread
Old 07-09-2008, 02:48 AM   #1
Registered Member
 
Join Date: Jul 2008
Posts: 1
OS: windows xp



I want to block internet access in some of the domain users using group policy in windows server 2003. So please help me to implement this.

__________________
amitchauarasia is offline  
Old 07-09-2008, 09:10 AM   #2
Registered Member
 
Join Date: Jul 2008
Posts: 38
OS: Serv 03 R2 SP2, Mac Os X 10.5.4, XP Pro SP2, XP Home SP2, Ubuntu



Quote:
Originally Posted by amitchauarasia View Post
I want to block internet access in some of the domain users using group policy in windows server 2003. So please help me to implement this.
My suggestion:
1) Disable their accounts right to modify ie setting.
2) Set a proxy inside ie to anything such as 0.0.0.0

Note: This can be bypassed by using a portable firefox, but it is the best option.

__________________
Krrose27 is offline  
Old 07-09-2008, 10:08 PM   #3
Registered Member
 
Join Date: Jan 2008
Posts: 356
OS: Win 2008 server, Win XP/Vista/Win 7



Hi Krosse27,
Actually, 2 of my office PC(domain user) out of 20 are not permitted to access net browsing, but they are using outlook (imagine that our pop3-mail.abc.com & SMTP-mail.zxy.net). There is no sprcific group in the domain.

I did not configure this but I want to know the configuretion.
1) From where I will disable the acount right?
2) Where I'll put proxy?
__________________
akaki is offline  
Old 07-15-2008, 10:34 PM   #4
Registered Member
 
Join Date: Jul 2008
Location: Los Angeles
Posts: 16
OS: Windows XP


Send a message via AIM to Fidoliedo Send a message via MSN to Fidoliedo Send a message via Yahoo to Fidoliedo

Amitchauarasia, if you have a router, you can limit by MAC address. Depending on your network design, there are limitless ways.
__________________
Fidoliedo is offline  
Old 08-26-2009, 11:39 PM   #5
Registered Member
 
Join Date: Aug 2009
Posts: 2
OS: XP-sp3



Quote:
Originally Posted by amitchauarasia View Post
I want to block internet access in some of the domain users using group policy in windows server 2003. So please help me to implement this.
__________________
dhirajkumar is offline  
Old 08-26-2009, 11:48 PM   #6
Registered Member
 
Join Date: Aug 2009
Posts: 2
OS: XP-sp3



block internet access through group policy in windows server 2003
__________________
dhirajkumar is offline  
Old 08-27-2009, 09:45 AM   #7
2xg
Team Manager, Networking Forums, Microsoft MVP
 
2xg's Avatar

Microsoft Most Valuable Professional
 
Join Date: Aug 2009
Location: SoCal
Posts: 19,874
OS: Windows O/S'es



Here you go....

1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet.

2. Right-click No Internet and press Enforced to check it.

3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying.

4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy.

2. Right-click Internet Explorer Maintenance and press Preference Mode.

NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode.

3. Navigate through Connections and double-click Proxy Settings (Preference Mode).

4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. (The box above this checkbox is where you set exceptions for your internal network)

5. Type 127.0.0.1 into Address of proxy and 80 into Port.

6. Press OK.

7. Close the No Internet group Policy.

NOTE: To prevent a user from changing their proxy settings, implement Disable changing proxy settings or Disable the Connections page in the No Internet policy.

To prevent a user from accessing the internet:
1. Select the No Internet group Policy under your domain and press Add under Security Filtering.

2. Use the Advanced dialog to locate and select the user, pressing OK.

3. Press OK.

4. If the user is logged on, force the policy to update.

__________________

Microsoft MVP 2011-2013 Windows Expert Consumer
Networking Articles & Tutorials
2xg is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2


All times are GMT -7. The time now is 10:45 PM.


Copyright 2001 - 2014, Tech Support Forum

Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts