Solved

How to lock down accounts in MS server 2003 ( disable internet access)

Posted on 2010-09-10
4
505 Views
Last Modified: 2012-05-10
Hello, I am a system administrator, however not very experienced in completely configuring a user account in active directory via GP. I am able to create a GP and add the users, however it seems that I am missing a step when configuring a policy. after setting a policy I've used update command, however it seems that the users are still able to access what I've locked down. For example and current issue: I am great need of restricting a user from accessing the internet, but allow the user to access much of the network resources they currently have. I've already set the GPO with my McAfee smartfilter, but they are still clicking away in cyberspace. is there anywhere someone can point me to for MS server 2003 config. and Mcafee smartfilter, maybe I missed step in that config. too. Thank you,  
0
Comment
Question by:grizNation
4 Comments
 
LVL 3

Expert Comment

by:jensskov
Comment Utility
How have you tried to block their access?

I assume that you have linked the GP to your domain container in the AD or to an OU?
0
 
LVL 4

Expert Comment

by:williamvanerp
Comment Utility
look whats going wrong with a the "resultant set of policies" MMC. Run mmc <enter> and add.remove snap-in, select the resultant set of policies. At the main screen of the mmc, rightclick the "resultant etc.." and let it collect, follow the instructions. With the results you can see what happend on the computer, which user and what happend with the policy. If its loaded, failed and what was the problem if it didn't load. You can see dependencies and the order of the followed policies. Ones you know whats wrong, you can correct it.
0
 
LVL 4

Accepted Solution

by:
oldPCguy earned 500 total points
Comment Utility
Here is a article on how to set up a GPO to block Internet access:
http://www.techsupportforum.com/microsoft-support/windows-nt-2000-2003-server-2008-server/267534-block-internet-access-through-group-policy-windows-server-2003-a.html

Since this only blocks IE Browsers, you'll want to do the same for Firefox/Mozilla. Here is a link to get the GPO .adm templates for Firefox:
http://www.frontmotion.com/Firefox/fmfirefox.htm

Regards
0
 

Author Closing Comment

by:grizNation
Comment Utility
i've looked at all articles and took each one step by step and have successfully blocked a dumby user I've created thank you,
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Suggested Solutions

I have put this article together as i needed to get all the information that might be available already into one general document that could be referenced once without searching the Internet for the different pieces. I have had a few issues where…
Learn about cloud computing and its benefits for small business owners.
This video discusses moving either the default database or any database to a new volume.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now