Solved

Block Internet for a Group of users in a OU

Posted on 2011-03-02
5
344 Views
Last Modified: 2012-05-11
Hi Experts,

Can you please let me how to block a bunch of users who are in a OU in AD. I need to block internet access to the outside world but allow internal webmail access to them.

Is there a way I can do this in the Server with out using a Hardware.

Thanks
0
Comment
Question by:gs1uk
5 Comments
 
LVL 15

Expert Comment

by:JBond2010
ID: 35017388
Why not exclude the gateway address on their systems from your Router/Firewall. Or you could create a GPO and link it to the OU and configure the GPO to set a proxy address which would block internet access.
0
 
LVL 34

Accepted Solution

by:
Paul MacDonald earned 500 total points
ID: 35017397
There's nothing native in AD to do this, though I can imagine a script that removes the default gateway for a group of people.  Otherwise you're likely looking at configuring something in a firewall.
0
 
LVL 15

Expert Comment

by:JBond2010
ID: 35017405
On your Router/Firewall you could block port 80 on the machines you do not want to have internet access, unless their are other users you access the PCs that need internet access.
0
 
LVL 6

Expert Comment

by:chuck-williams
ID: 35018988
Just as JBond mentioned, I have done this by setting up a proxy server setting in group policy that points 1.1.1.1 and then using group policy filtering to apply to a restrict internet access group. Make sure you also set it up so they cannot change proxy server settings.

You can also set "Do not use proxy server for these addresses" if you need to allow them to get to a few web applications.



0
 
LVL 2

Expert Comment

by:danny1875
ID: 35019066
I think the easiest way to do that would be to reserve a range of IP addresses for the clients and then exclude that range from internet access via your firewall.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now