[THIN] OT: Restricting IE On Terminal Server

  I want to give a group of users Internet Explorer, but restrict them to
certain web sites. What's the best way to do this? 
  I thought this would be quite straightforward using Content Advisor via
Group Policy. I enabled it for a GPO that applied to a group of users and
restricted them to certain sites. I logged on as on of the users and did
receive the restriction. However, I then noticed that my administrator's
session to the same server was also restricted. I verified that, even though
the Content Advistor settings are listed under the User Configuration
(Windows Settings, Internet Explorer Maintenance, Security , Security Zones
and Content Ratings), any restriction applied to any user on a server causes
those settings to be applied to *all* users. Any ideas? (I know about kiosk
mode, but since I'm publishing a desktop, they could create a shortcut to
Iexplore.exe in their home drive and get a normal instance of IE, so I want
something a little more sure).
 
Thanks and Happy New Year,
 
Jeff Durbin

Other related posts: