Solved

Block Internet Access, Allow Intranet, No Proxy Server

Posted on 2013-01-24
7
3,438 Views
Last Modified: 2013-01-24
Hello

I'm currently working with a company to change their group policy.

They have a group policy that sets a proxy server address off 0.0.0.0

The GP is then assigned to an OU and any user in that OU gets the proxy address and is therefore unable to access the Internet.

Now, we have a new Intranet system but because the vast majority of users have the above proxy set, they are unable to access the Intranet.

What is the best way of allowing access to the intranet, but still blocking Internet Access?

The company does not have a proxy server

Thanks in advance
0
Comment
Question by:Tony
7 Comments
 
LVL 13

Expert Comment

by:Alexios
ID: 38814173
Hello
Fix the GP so everyone have access and from your DHCP server publish only the subnet and DNS server. Do not publish the gateway
0
 
LVL 1

Author Comment

by:Tony
ID: 38814227
But wouldn't that then block Internet for every user?

For instance the GPO isn't applied to one OU, which contains managers, and they are allowed Internet access
0
 
LVL 17

Expert Comment

by:aflockhart
ID: 38814238
If everything including the intranet web server is on the same subnet , and you don;t need to route any IP traffic to other sites, you could set all the client computers to have no default gateway ( or set it to an IP address that doesn't exist).  They would still be able to communicate on the local subnet but not beyond.

Then you don't need to set up any proxy server settings.

EDIT - re your comment above: if you want the managers to have different behaviour they would need to have either different IP configuration (such as pointing to a real default gateway) or different browser behaviour ( either them or the other staff pointing to a proxy server address).  Depending on how many managers there are, you may be able to set up fixed IP info for them, or maybe a DHCP scope with different options and with reserved IP addresses for these computers.  

Or the managers could run a script which adds (manually) an IP route to the internet, pointing at the default gateway.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 13

Expert Comment

by:Alexios
ID: 38814302
In addition with my answer aflockhart's suggestion is correct

Further on that the best solution will be a UTM device but with a cost of course...
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 500 total points
ID: 38814610
All you need to do is add the sites that you want to allow to the Proxy Exception list

proxy
0
 
LVL 13

Expert Comment

by:Gabriel Clifton
ID: 38815228
dstewartjr's suggestion is the way to do it.
0
 
LVL 1

Author Closing Comment

by:Tony
ID: 38817457
This was exactly what I needed, and so simple!

Thanks very much
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now