Yes, you can do it that way. Client address sets were designed with you in mind ;-) Jim Harrison MCP(NT4, W2K), A+, Network+, PCG ----- Original Message ----- From: "Chirag Shah" <cshah@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, November 11, 2001 20:40 Subject: [isalist] Re: Want to block internet access for particular user in the company http://www.ISAserver.org I know ... you were not commenting on the deployments.. Actually, I was trying to put it this way... I have around 30 clients with static Internal IP Addresses, now out of this 30 clients I would like to put Net Block on 5-6 clients. !! If your answer still resides in the mail that you have sent before .. than I will do that way... if there are any changes because of clients are not DHCP than let me know please. Thanks CS -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, November 12, 2001 8:51 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Want to block internet access for particular user in the company http://www.ISAserver.org I'm sorry; any easier what than what for what? I wasn't commenting on their deployments, just how to have user-based restrictions. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG ----- Original Message ----- From: "Chirag Shah" <cshah@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, November 11, 2001 11:16 Subject: [isalist] Re: Want to block internet access for particular user in the company http://www.ISAserver.org All PCs in my company has local 192.168.111.X series IP addresses... if there is any easier way for this.. -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, November 12, 2001 12:39 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Want to block internet access for particular user in the company http://www.ISAserver.org He asked for user-based restriction, so that's what I answered. IP-based restrictions are better suited for server-limiting protocol access, especially when you operate a DHCP-based network. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG ----- Original Message ----- From: "Jim Locke" <jim@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, November 11, 2001 10:23 Subject: [isalist] Re: Want to block internet access for particular user in the company http://www.ISAserver.org Jim, Couldn't he just create 2 client address sets (placing the ip address's of the computers not allowed in 2nd set) sets and give access to only the 1st set? Jim.. PS: Nice name! ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, November 11, 2001 10:15 AM Subject: [isalist] Re: Want to block internet access for particular user in the company > http://www.ISAserver.org > > > You have to allow ISA to authenticate all users so that you can create Site > and Content rules to refuse specific ones. > That means ISA has to either be a member server in your corporate domain, or > that the ISA domain has to trust the corporate domain(s). > If you're not using domains, then you'll have to duplicate all user accounts > (and passwords) in the ISA local SAM. > > the ISA help discusses this, as do many of the articles on > www.isaserver.org/pages/learning%20zone.htm. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > > ----- Original Message ----- > From: "Chirag Shah" <cshah@xxxxxxxxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Sunday, November 11, 2001 00:14 > Subject: [isalist] Want to block internet access for particular user in the > company > > > http://www.ISAserver.org > > > Hi! > > I have SBS2K which includes ISA Server. Now, I would like to > block Internet Access for few of the users in my company since BOSS > doesn't want them to use Internet. Can someone please tell me how can I > block access to the users in my company. > > Thanks > CS > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cshah@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cshah@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')