Configure Internet access 1

[Decus05]

Can someone please help and provide a soluction for this problem.
I have a windows 2000 domain running active directory. I would like to configure IE6 for individual users. Other requirements would be that users could only access sites specified by the administrators

 

[rpiver]

Configuring IE6 for Individuals could be done through a Group Policy. As for limiting users to specified sites, as far as I know, you will need some type of firewall that can perform content filtering based on the user. ISA can be configured for that. The other thought that I had is to lock to browser down so that it goes to a specific internal website and from there have the approved links (if it is just a couple) that you will allow users to visit.

Hope this helps,
Rad Piver

http://www.globalstrata.com

 

[Decus05]

Thanks for your reply Rad i have been looking at group policy, can you tell me how you locked down the browser to only access specific external sites. I assume it will be similar to internal sites

 

[rpiver]

If you are using Windows 2003 Server you can use this

http://www.microsoft.com/resources/.../2003/all/techref/en-us/w2k3tr_gpiem_what.asp

and setup the favorites and remove the address bar.

You may want to read these too before getting started

http://www.winnetmag.com/Article/ArticleID/20468/20468.html

http://www.cramsession.com/articles/files/intellimirror-pt-3---mana-9192003-1023.asp

http://www.lokbox.net/WhitePapers/GroupPolicy/GP2.asp

If you look at the link directly above. You will see that they have a graphic. Configure the favorites to specify approved links. You will also want to go to USER Configuration, Administrative Templates, Windows Components, Internet Explorer, to lock down additional settings.

Upon a little more research you are going to have to use IEAK to get rid of the address bar. That link is below

http://www.microsoft.com/windows/ieak/default.mspx

You can tighten down a lot more with IEAK. However I would still use the GPO also. Between the two you will have a lot of control.

Rad

 

[GlenJohnson]

rpiver, you might want to take note that this is the Windows 2000 server forum, and Decus05 mentioned......

I have a windows 2000 domain running active directory.

I agree entirely that group policy is the way to go, but solving problems like this is a bit like being Sherlock Holmes, you have to look at all the clues. You're statement "If you are running 2003 Server" was just a bit out of place. Do you have a similar site for Windows 2000? Thanks for the good input.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin/Central Florida feel free to join the Tek-Tips in Chicago, Illinois Forum.
TTinChicago
Johnson Computers

 

[minxca]

See: Thread96-801081

 

[rpiver]

Sorry Glen, I didn't clarify the below. Only the top link is for Windows 2003 all the others are Windows 2000.

Sorry for the misunderstanding.

Rad