Sorry - I should have clarified. I had 4 or 5 GPO's linked to the OU and had configured permissions on each one to deny application to Domain Administrators. The policies in place on the OU worked perfectly - all of my desktop/start menu redirection, program restrictions, etc., are all fine. The one that was buggy was the IE proxy restrictions, which didn't seem to limit themselves to the users that received the policy. See my previous post for a description of the setup and what happened. Jeff Durbin -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Eric S. Perkins Sent: 9 January 2004 4:06 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: SV: Re: OT: Limiting User Account If your still interested trying the proxy method, just deny the admin groups the apply policy setting, and configure the opposite policy for allowed users, meaning turn the proxy setting off or configure it properly for groups allowed access. -Eric ________________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Kenzig http://thethin.net Sent: Thursday, January 08, 2004 19:51 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: SV: Re: OT: Limiting User Account You could could copy down a dummy hosts file to the PC at logon via a logon script and then copy it back in logon script for other userst. JK -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Jeff Durbin Sent: Thursday, January 08, 2004 6:32 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: SV: Re: OT: Limiting User Account I've recommended that my customer buy it based on evaluating it. Configuration is a snap with the INI file. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Roger Riggins Sent: 9 January 2004 8:22 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: SV: Re: OT: Limiting User Account Using Public Web Browser I have successfully done this. Configuration is done with an .ini file easily. http://teamsoftware.bizland.com/index.html R -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jeff Durbin Sent: Thursday, January 08, 2004 11:34 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: SV: Re: OT: Limiting User Account I tried this last weeek. It does work, but even if you implement this in a policy that applies only to a specific group, once *any* user receives the policy, the setting is applied to *all* users on the machine immediately, including the administrator. Jeff Durbin -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Svein Arild Haugum Sent: 9 January 2004 12:19 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] SV: Re: OT: Limiting User Account You can also make a fake proxy setting for IE in Active Direcotry policyes, and make an exclusion for the only pages allowed. Mvh Svein Arild -----Opprinnelig melding----- Fra: Mack, Rick [mailto:RMack@xxxxxxxxxxxxxx] Sendt: 8. januar 2004 07:21 Til: 'thin@xxxxxxxxxxxxx' Kopi: 'Jerry.Uy@xxxxxxxxxxxxxxxx' Emne: [THIN] Re: OT: Limiting User Account Hi Jerry, An anonymous published app runing IE in kiosk mode would come close. Since you've got no navigation controls, it'd be a case of what you see is all you get. regards, Rick Ulrich Mack Volante Systems 18 Heussler Terrace, Milton 4064 Queensland, Australia tel +61 7 32467704 rmack@xxxxxxxxxxxxxx -----Original Message----- From: Uy, Jerry (ERA) [mailto:Jerry.Uy@xxxxxxxxxxxxxxxx] Sent: Thursday, 8 January 2004 12:06 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] OT: Limiting User Account How do I create an account that is limited to access a single webpage\server on our network. No access to any other servers and/or files. Regards J ******************************************************** This Week's Sponsor - Chip PC - The Next Step in Thin Client Technology. Choose from a wide range of options offering industry-leading, innovative thin client solutions http://www.chippc.com/products/hardware/index.asp ********************************************************* Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm