How to lock down accounts in MS server 2003 ( disable internet access)
Hello, I am a system administrator, however not very experienced in completely configuring a user account in active directory via GP. I am able to create a GP and add the users, however it seems that I am missing a step when configuring a policy. after setting a policy I've used update command, however it seems that the users are still able to access what I've locked down. For example and current issue: I am great need of restricting a user from accessing the internet, but allow the user to access much of the network resources they currently have. I've already set the GPO with my McAfee smartfilter, but they are still clicking away in cyberspace. is there anywhere someone can point me to for MS server 2003 config. and Mcafee smartfilter, maybe I missed step in that config. too. Thank you,
look whats going wrong with a the "resultant set of policies" MMC. Run mmc <enter> and add.remove snap-in, select the resultant set of policies. At the main screen of the mmc, rightclick the "resultant etc.." and let it collect, follow the instructions. With the results you can see what happend on the computer, which user and what happend with the policy. If its loaded, failed and what was the problem if it didn't load. You can see dependencies and the order of the followed policies. Ones you know whats wrong, you can correct it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i've looked at all articles and took each one step by step and have successfully blocked a dumby user I've created thank you,
I assume that you have linked the GP to your domain container in the AD or to an OU?