[THIN] Blocking Internet Access by Group

  • From: "Greg Reese" <GReese@xxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 3 Apr 2003 09:06:03 -0500

On NT TSE 4.0 I blocked internet access by group by setting permissions =
on wsock32.dll.  The group "non-internet users" was set to no access on =
it.  That stopped them from accessing the internet through Internet =
Explorer, Ms Outlook, Windows Explorer and all the other ways they got =
around my attempts to block them.  I find it interesting that my users =
can't add an attachment to email or rename a file without having their =
hands held but deny them access to yahoo and they find a million ways =
around it.

but I digress...

The above solution does not work in Windows 2000.  If I change =
permissions on wsock32.dll the desktop goes nuts.

My Watchguard firewall will block access but only by requiring a =
password to be entered in a page for access.  That is more trouble that =
it is worth.

All I want to do is have the internet blocked based on group membership. =
 If they are in the group, no external access.

I have tried to find an add on or something but keep coming up empty.

Does any one have any ideas on how I can do this?

I have windows 2000 all the way around, a Watchguard Firebox II, and =
internet explorer 5.5 on all the servers.

Thanks!

Greg
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: