RE: Stop browsing the web through GP?

["Simon Taplin" <simont () pop co za>]

There are several things you can do, depending on how bright your users are.

1. Create a policy for the OU to just remove the IE icon from the desktop
2. Create a policy that restricts users from running iexplore.exe
3. Create a policy that sets IE to connect a non-existant IP/Proxy
name/setup policy to stop people from changing the IE settings.

Of course, none of these will help if your users can/know to install
Netscape/Mozilla/You browser here.

Simon


Quote for the day:
Systems Administration is the kind of job that nobody notices if you're
doing it well. People only notice when their systems are not working.

-----Original Message-----
From: Spencer D'oro [mailto:sdoro () comcast net]
Sent: Friday, 12 September 2003 12:01 PM
To: security-basics () securityfocus com
Subject: Stop browsing the web through GP?


I have a Windows Server 2003 domain.  I am looking for a way to keep
users in a partcular OU from browsing the web.  I want to accomplish
this through Group Policy, but I can't find anything in the ADM
templates for Users or for Computers.  Is there another ADM template I
am missing?  Or is the policy all ready present and I am missing it?  I
have tried searching on Tech-Net and Google and I haven't been able to
find anything.  Please help.

Loki


---
This email is hopefully virus free as it has been
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 2003/09/11


---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------