?
Solved

How to lock down accounts in MS server 2003 ( disable internet access)

Posted on 2010-09-10
4
Medium Priority
?
519 Views
Last Modified: 2012-05-10
Hello, I am a system administrator, however not very experienced in completely configuring a user account in active directory via GP. I am able to create a GP and add the users, however it seems that I am missing a step when configuring a policy. after setting a policy I've used update command, however it seems that the users are still able to access what I've locked down. For example and current issue: I am great need of restricting a user from accessing the internet, but allow the user to access much of the network resources they currently have. I've already set the GPO with my McAfee smartfilter, but they are still clicking away in cyberspace. is there anywhere someone can point me to for MS server 2003 config. and Mcafee smartfilter, maybe I missed step in that config. too. Thank you,  
0
Comment
Question by:grizNation
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Expert Comment

by:jensskov
ID: 33648827
How have you tried to block their access?

I assume that you have linked the GP to your domain container in the AD or to an OU?
0
 
LVL 4

Expert Comment

by:williamvanerp
ID: 33648857
look whats going wrong with a the "resultant set of policies" MMC. Run mmc <enter> and add.remove snap-in, select the resultant set of policies. At the main screen of the mmc, rightclick the "resultant etc.." and let it collect, follow the instructions. With the results you can see what happend on the computer, which user and what happend with the policy. If its loaded, failed and what was the problem if it didn't load. You can see dependencies and the order of the followed policies. Ones you know whats wrong, you can correct it.
0
 
LVL 4

Accepted Solution

by:
oldPCguy earned 1500 total points
ID: 33649887
Here is a article on how to set up a GPO to block Internet access:
http://www.techsupportforum.com/microsoft-support/windows-nt-2000-2003-server-2008-server/267534-block-internet-access-through-group-policy-windows-server-2003-a.html

Since this only blocks IE Browsers, you'll want to do the same for Firefox/Mozilla. Here is a link to get the GPO .adm templates for Firefox:
http://www.frontmotion.com/Firefox/fmfirefox.htm

Regards
0
 

Author Closing Comment

by:grizNation
ID: 33810477
i've looked at all articles and took each one step by step and have successfully blocked a dumby user I've created thank you,
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Learn about cloud computing and its benefits for small business owners.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question