Terminal server and Internet access...

[Timmkatt]

Is it possible to allow a certain group of terminal server users access to one website from their ts desktop without giving global web access to that group or restricting web access to the other groups? Thanks.

 

[monsterjta]

I do this using a script which modifies the Proxy setting in IE. At one time I used the native GPO, but it kept breaking and I could not find any answers as to why.

I wrote the script containing my Proxy settings and attached it to a user logon script.

Here's an example script that essentially blocks access to all internet sites, except for FTP and HTTPS sites. This will also allow access to

http://www.shoes.com.

Anything else will be directed to a "blackhole". Of course, simply plug in whatever sites you wish to add.

Dim objShell
On error resume next
'''''''''''''''''''''''''''''''''''''''''''
'Proxy settings for limited Internet access
'Courtesy of monsterjta @ tektips
'strValueProxyOverride = allowed sites
'''''''''''''''''''''''''''''''''''''''''''
locProxyEnable = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable"
binValueProxyEnable = 1
locProxyServer = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer"
strValueProxyServer = "localhost:80"
locProxyOverride = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride"
strValueProxyOverride = "www.shoes.com;[URL unfurl="true"]https://;ftp://;<local>"[/URL]

'write
Set objShell = CreateObject("WScript.Shell")

objShell.RegWrite locProxyEnable, binValueProxyEnable, "REG_DWORD"
objShell.RegWrite locProxyServer, strValueProxyServer, "REG_SZ"
objShell.RegWrite locProxyOverride, strValueProxyOverride, "REG_SZ"

Hope This Helps,

Good Luck!

(Enamoration by Automation)