[gptalk] Re: restrict internet access for several users

The big problem with the dummy proxy server solution is that it can be
bypassed by any user with access to an alternate browser. There are even
some browsers that run off jump drives with no installation, so it is
extremely difficult to make this work consistently. 


In a K-12 environment, I would strongly suggest looking into some sort
of proper content filtering if you don't already have. We run Websense
and it will let you lock things down as granularly as you want. Great
product and does exactly what it's supposed to. It's not cheap but I am
under the impression a K-12 school has a legal obligation to at least
attempt to filter inappropriate content so there's solid justification
for it.

James Prudente

Network & Systems Coordinator

Islip Public Schools

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Tom Strader
Sent: Monday, March 19, 2007 11:19 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: restrict internet access for several users

 

Darren,

 

What if the users need access to specific Internet sites? If you set a
dummy Proxy server, it inhibits all traffic, correct?

 

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of tools@xxxxxxxxxx
Sent: Monday, March 19, 2007 11:08 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: restrict internet access for several users

Dave-

Whenever this question comes up, the best answer is usually to use a
Proxy Server to control this. If you have ISA from MS then you can use
its capability to integrate into AD to control access for specific users
and groups. However, in the absence of a proxy server solution, you can
kludge a solution using IE Maintenance Policy. Basically use the feature
in IE Maintenance policy to set a proxy server setting in IE to set a
"dummy" proxy server. By setting that, IE essentially fails when trying
to access any sites for the users who receive that policy.

 

Darren

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Clapham
Sent: Monday, March 19, 2007 8:03 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] restrict internet access for several users

 

I need to restrict internet access for 7 users on our school network.
They still need access to the file server but only to disable the
internet.  Our users will login to several different computers through
out the day so I am not able to lock a certain computer down.  We are
running Active Directory on Windows Server 2003 with XP Pro SP2 on the
workstations.  

 

I have been through the User Configuration and can only find a policy
that will remove the IE icon from the desktop and quick launch.  This
might work if I could find a way to disable the IE on the Start Menu as
well but am open to other ways also.

 

Thanks

Dave Clapham

Pawnee Heights School

Rozel, Kansas

Other related posts: