That would be my suggestion too. Darren just beat me to it. :-) //signed// Jamie R Nelson Systems Engineer Ingenium Corporation 72 CS/SCBNF 405.739.2811 (DSN 339) ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of tools@xxxxxxxxxx Sent: Monday, March 19, 2007 10:08 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: restrict internet access for several users Dave- Whenever this question comes up, the best answer is usually to use a Proxy Server to control this. If you have ISA from MS then you can use its capability to integrate into AD to control access for specific users and groups. However, in the absence of a proxy server solution, you can kludge a solution using IE Maintenance Policy. Basically use the feature in IE Maintenance policy to set a proxy server setting in IE to set a "dummy" proxy server. By setting that, IE essentially fails when trying to access any sites for the users who receive that policy. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Dave Clapham Sent: Monday, March 19, 2007 8:03 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] restrict internet access for several users I need to restrict internet access for 7 users on our school network. They still need access to the file server but only to disable the internet. Our users will login to several different computers through out the day so I am not able to lock a certain computer down. We are running Active Directory on Windows Server 2003 with XP Pro SP2 on the workstations. I have been through the User Configuration and can only find a policy that will remove the IE icon from the desktop and quick launch. This might work if I could find a way to disable the IE on the Start Menu as well but am open to other ways also. Thanks Dave Clapham Pawnee Heights School Rozel, Kansas