[gptalk] Re: gp template for internet explorer only

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Fri, 22 Jun 2007 09:44:28 -0700

Sounds like that computer has Loopback enabled on it Dave. You might want to
check that.


From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of DiGenova, Dave
Sent: Friday, June 22, 2007 9:39 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: gp template for internet explorer only


hi all


I must be missing something as we did create an OU then added the user and
did the user config as below and it works for that user 


but when other users not in that OU use the same computer it blocks them as
well. Other users not using the same computer are fine.

Its like it pushes it to the computer not just the user.

Very strange.




From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Omar Droubi
Sent: Wednesday, June 06, 2007 12:06 PM
To: gptalk@xxxxxxxxxxxxx
Subject: RE: [gptalk] gp template for internet explorer only



I am not sure what you are asking is really coming through loud and clear
maybe you can elaborate.


Let me try to interpret what you are asking and you can say if it is right
or wrong.


You want to be able to limit a specific set of users in an OU to only be
able to use Internet Explorer to access the intranet and no Internet sites.
when a user types in an Internet URL you want them redirected to an Internal


Is that about right?


The GPO settings for IE can restrict sites but the redirection will need to
happen on a proxy server, router of firewall. ISA 2006 makes that real easy
if it is the gateway or configured as the proxy.


For a GPO you can configure the content Ratings allowed sites to add your
URLs and then you may be able to use a wildcard entries for everything else
but I am not sure how or if the wildcard configuration will work as desired
but it is definitely worth a try.


In the GPO you can find this setting in :


user configuration-Internet Explorer Maintenance-Security-Security Zones and
Content Ratings-Then in the content rating section choose to import the
content ratings and configure the intranet dns zones to always allow and
then create a wildcard for the Never allowed sites something like *.com and
then restricted


Good luck,






From: gptalk-bounce@xxxxxxxxxxxxx on behalf of DiGenova, Dave
Sent: Wed 6/6/2007 8:47 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] gp template for internet explorer only

Hi all

Is there any predefined/easy way to have an OU (2003) have access to
internet explorer only?

Which we will redirect to one of our intranet sites with no external links.


Other related posts: