Are you issuing IP's via DHCP? How about hardcoding the IP Address on the user's workstation, minus the gateway address, and then denying him access, via GPO, to the network configuration. A bit of a dirty fix I know but it might suffice.
Regards Peter Johnson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko Sent: 16 June 2005 17:23 To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] disable internet usage for an account Adam Hanel wrote: > We'd like to disable internet access (not just IE but firefox, mozilla, > etc) for a specific account, but still allow the account to have access > to network shares, is this possible through GPO? > > Does any one have any ideas? Best approach for you will be to deploy in Your network proxy server with requirement to authenticate for a user who wants to get access to internet resources, then deploy proxy settings with GPO and on Your firewall block access to Internet resources for any client host except proxy server. -- Tomasz Onyszko http://www.w2k.pl List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
