Link to home
Start Free TrialLog in
Avatar of scsone
scsoneFlag for United States of America

asked on

What options do I have to block users from applications and websites with Windows Server (any version)

Im looking for options that are avaiable to me, that I can create a controlled environment for users on one of my clients windows servers.  Currently they have Server 2003.  Right now the server is doing nothing but acting as a workgroup share.  I plan to change the server to a domain controller, and begin using Active Directory.

Im not entirely clear on what it is that Im actually looking for, as in what it would be called or how to properly go about it.  I've seen these types of user accounts on networks in the past, however I've never had the privilegde of setting this up myself.  

To describe what it is that I have seen, which is what Im trying to accomplish for my customer is that in the user profile the user is only able to see and open Internet explorer pointed to one website with no deviations from that site.   No applications other then Word and Excel were visible.  

Any advice will be appreciated
Avatar of Cris Hanna
Cris Hanna
Flag of United States of America image

The easiest way to control that is either Terminal Services
Users have a Desktop Computer with just an OS and an RDP client
They fire up the RDP client and logs them on to a desktop actually running on a Windows Server 2008 or higher acting as a Terminal Services Server.   Then you control at that level what is happening.

Since you clearly indicate you don't have experience in this realm, you may want to consider working with another partner who does

This could be accomplished in other ways such as Group Policies and Account Priviledges

How many end users in this company?   Have they requested this big change or are you suggesting it?
Avatar of scsone

ASKER

The client im working with has approximately 20 users.  
I plan on implementing this in a testing environment long before it would go live to the client.  And to answer your question about whether it was requested or suggested, I would have to say a little of both.  Unfortunately in my case there isn't anyone in my area with direct access to this knowledge so it is my duty to learn it for this client as well as future clients thus the reason I'm asking the question here.

I've seen what I'm asking about done without RDP as well as with RDP, so I do understand the concept.  I will research Group Policies and see what I can learn.  However the question is still open for discussion.  Again any additional advice would be great.
ASKER CERTIFIED SOLUTION
Avatar of Cris Hanna
Cris Hanna
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of scsone

ASKER

Is a demo of that software available with the microsoft action pack?  After doing some heavy reading I will most likely be able to do everything necessary with Active Directory and Group Policies as mentioned by you earlier.  So either way I will just increase mine and my employees tech abilities by testing scenarios we are looking for with what we have available to us, as well as demo'ing some of the newer server OS's by MS..

Thanks for your time Cris, any other advice will be greatly appreciated but I think at this point I have the information needed to move forward with testing and training myself and my employees.

Brandon
Not sure about action pack but you can get a trial and lots of info here http://technet.microsoft.com/en-us/evalcenter/gg604826.aspx

Good Luck