• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 273
  • Last Modified:

Is there any way that we can give internet access on machine basis instead of users.We use ISA 2006.

Hi,

Is there any way that we can give internet access on machine basis instead of users.We use ISA 2006.
So that any user who loggs in to the machine will have internet access
Regards
Sharath
0
bsharath
Asked:
bsharath
  • 5
  • 4
  • 2
  • +1
1 Solution
 
Malli BoppeCommented:
Sharath

Move all the workstations to seperate OU and create group policy.with a dummpy proxy address.
move the all the other workstations to a different OU configure a group policy with a real time proxy address.

0
 
balmasriCommented:
If your enviroment uses DHCP to distribute IP addresses, Then ON DHCP console reserve an IP address to the computer you want to allow to access the computer then
ON ISA Console
go to Firewall policy>toolbox>new>computer>Create a computer there.
Create an access rule in Firewall plolicy that allow this computer to access external.
0
 
bsharathAuthor Commented:
mboppe
Sorry could not follow your method...

balmasri
I need to do this for all the 3000+ computers?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
chandru_solCommented:
What is the need for doing this on computers rather than users?

regards
Chandru
0
 
bsharathAuthor Commented:
USers are using internet through Run as and i cannot remove run as as it is used for different applications.So though to plan of a way to give access to machines rather than users.
0
 
chandru_solCommented:
what is the credentials they are using for run as?
0
 
bsharathAuthor Commented:
They use there friends credentials that has internet permissions.
Say A has internet.
B uses A's credentials to access internet in his machine where in B should not use internet.
We have provided A internet access as he has to look for some materials for the project.

I know that disabling Run as may reduce the risk but need some other way.Monitoring and warning them is not too good as they repeat it again and again.
0
 
Malli BoppeCommented:
Sharath
you didn't understand my method or you do not want to implement in your case
0
 
bsharathAuthor Commented:
mboppe
I did not understand your method...
0
 
Malli BoppeCommented:
Move all the computers which neeed internet access and write a group policy
USer COnfig-Win Settings->IE Maintenance->Connection->Proxy Settings put a real proxy address( I assume that your are using the proxy address)

Move all the computers which doesn't need internet access and write a group policy with a dummy proxy address.
0
 
bsharathAuthor Commented:
mboppe

Users who have dummy proxy can always change the proxy matching othere and again start using Run As right?
0
 
Malli BoppeCommented:
you need to disbale with the group policy so that users cann't change the proxy address
COMP COnfig->aDMIN tEM->Wind Comp->IE->IE control Panel->Disbale connections Page
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

  • 5
  • 4
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now