[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 527
  • Last Modified:

How to lock down accounts in MS server 2003 ( disable internet access)

Hello, I am a system administrator, however not very experienced in completely configuring a user account in active directory via GP. I am able to create a GP and add the users, however it seems that I am missing a step when configuring a policy. after setting a policy I've used update command, however it seems that the users are still able to access what I've locked down. For example and current issue: I am great need of restricting a user from accessing the internet, but allow the user to access much of the network resources they currently have. I've already set the GPO with my McAfee smartfilter, but they are still clicking away in cyberspace. is there anywhere someone can point me to for MS server 2003 config. and Mcafee smartfilter, maybe I missed step in that config. too. Thank you,  
0
Vincent Bad Bear
Asked:
Vincent Bad Bear
1 Solution
 
jensskovCommented:
How have you tried to block their access?

I assume that you have linked the GP to your domain container in the AD or to an OU?
0
 
williamvanerpCommented:
look whats going wrong with a the "resultant set of policies" MMC. Run mmc <enter> and add.remove snap-in, select the resultant set of policies. At the main screen of the mmc, rightclick the "resultant etc.." and let it collect, follow the instructions. With the results you can see what happend on the computer, which user and what happend with the policy. If its loaded, failed and what was the problem if it didn't load. You can see dependencies and the order of the followed policies. Ones you know whats wrong, you can correct it.
0
 
oldPCguyCommented:
Here is a article on how to set up a GPO to block Internet access:
http://www.techsupportforum.com/microsoft-support/windows-nt-2000-2003-server-2008-server/267534-block-internet-access-through-group-policy-windows-server-2003-a.html

Since this only blocks IE Browsers, you'll want to do the same for Firefox/Mozilla. Here is a link to get the GPO .adm templates for Firefox:
http://www.frontmotion.com/Firefox/fmfirefox.htm

Regards
0
 
Vincent Bad BearIT DirectorAuthor Commented:
i've looked at all articles and took each one step by step and have successfully blocked a dumby user I've created thank you,
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now