RE: Stop browsing the web through GP?

["Wesley T. Scott" <TScott () uwyo edu>]

You can also do this with IPSec. Create an IPSec policy on Active
Directory and apply it to an OU.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodt
echnol/windowsserver2003/proddocs/deployguide/dmebg_dsp_kbnk.asp gives
some background, while http://support.microsoft.com/?scid=813878 and
http://www.microsoft.com/serviceproviders/columns/using_ipsec.asp show
examples of creating policies using the command line tool and the GUI.

Troy Scott

-----Original Message-----
From: McGill, Lachlan [mailto:mcgilll1 () anz com] 
Sent: Sunday, September 14, 2003 5:12 PM
To: Spencer D'oro; security-basics () securityfocus com
Subject: RE: Stop browsing the web through GP?

Internet Explorer settings are configurable through Group Policy. You
can try pointing the proxy server to a non existent IP address and then
completely lock down IE so they can't change any settings. You will find
these in User Settings.

-----Original Message-----
From: Spencer D'oro [mailto:sdoro () comcast net]
Sent: Friday, 12 September 2003 12:01 PM
To: security-basics () securityfocus com
Subject: Stop browsing the web through GP?


I have a Windows Server 2003 domain.  I am looking for a way to keep
users in a partcular OU from browsing the web.  I want to accomplish
this through Group Policy, but I can't find anything in the ADM
templates for Users or for Computers.  Is there another ADM template I
am missing?  Or is the policy all ready present and I am missing it?  I
have tried searching on Tech-Net and Google and I haven't been able to
find anything.  Please help.

Loki

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.512 / Virus Database: 309 - Release Date: 8/19/2003
 


------------------------------------------------------------------------
---
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
------------------------------------------------------------------------
----


------------------------------------------------------------------------
---
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Captus Networks
Are you prepared for the next Sobig & Blaster?
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Precisely Define and Implement Network Security
 - Automatically Control P2P, IM and Spam Traffic
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------