hi all I must be missing something as we did create an OU then added the user and did the user config as below and it works for that user but when other users not in that OU use the same computer it blocks them as well. Other users not using the same computer are fine. Its like it pushes it to the computer not just the user. Very strange. ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Omar Droubi Sent: Wednesday, June 06, 2007 12:06 PM To: gptalk@xxxxxxxxxxxxx Subject: RE: [gptalk] gp template for internet explorer only Dave, I am not sure what you are asking is really coming through loud and clear maybe you can elaborate. Let me try to interpret what you are asking and you can say if it is right or wrong. You want to be able to limit a specific set of users in an OU to only be able to use Internet Explorer to access the intranet and no Internet sites. when a user types in an Internet URL you want them redirected to an Internal URL. Is that about right? The GPO settings for IE can restrict sites but the redirection will need to happen on a proxy server, router of firewall. ISA 2006 makes that real easy if it is the gateway or configured as the proxy. For a GPO you can configure the content Ratings allowed sites to add your URLs and then you may be able to use a wildcard entries for everything else but I am not sure how or if the wildcard configuration will work as desired but it is definitely worth a try. In the GPO you can find this setting in : user configuration-Internet Explorer Maintenance-Security-Security Zones and Content Ratings-Then in the content rating section choose to import the content ratings and configure the intranet dns zones to always allow and then create a wildcard for the Never allowed sites something like *.com and then restricted Good luck, Omar ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx on behalf of DiGenova, Dave Sent: Wed 6/6/2007 8:47 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] gp template for internet explorer only Hi all Is there any predefined/easy way to have an OU (2003) have access to internet explorer only? Which we will redirect to one of our intranet sites with no external links. Thanks!!