2 user on same pc: internet ok - internet denied

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi.

I need an help to solve a problem of authorization to internet access.

Here is my condition : 1 windows 2000 Domain , 20 client windows xp , DHCP
up , gateway=dsl router

I would like to create 2 extremely limited users (domain users and gpo
restrictive) on the same PC with these rights:

user 1 has the possibility to access internet resource

user 2 has not the internet access but he can use lan resource

Any idea?

p.s.: route add/delete in file batch doesn't work cause the restrictions.



Thk

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Thk,

I would create 2 Organizational Units within your domain called the same
thing you mentioned for users, Domain Users & GPO Restrictive. In the GPO
Restrictive OU create a group policy object called Restrict Internet or
something similiar (in my case it is called Ourdomain Internet Proxy). Edit
that group policies User Configuration section under Windows Settings -
Internet Explorer - Connection - Proxy Settings and Type in a non existent
proxy server such as 'proxy.nowhere' and port 8080. You may also use a real
proxy that is free and easy to configure if you know Linux (Google - Squid
Proxy). After you have set proxy settings you will want to make sure the
user doesn't undo the settings you made to his/her system. Now go into User
Configuration - Administrative Templates - Windows Components - Internet
Explorer - Internet Control Panel and Enable the 'Disable the connections
page'. Place the user you wish not to access the internet in this
Organizational Unit where you created the Restrict Internet Policy. This
user will still have access to internal resources, just no internet. The
other user can just be in an organizational unit that does not apply the
forementioned policy restrictions.

Mike...

P.S - I did this last weekend at my work, and boy did some people get mad.
LOL!

"die" <asio@libero.it> wrote in message
news:d04bbh$kg0$1@newsread.albacom.net...
> Hi.
>
> I need an help to solve a problem of authorization to internet access.
>
> Here is my condition : 1 windows 2000 Domain , 20 client windows xp ,
> DHCP
> up , gateway=dsl router
>
> I would like to create 2 extremely limited users (domain users and gpo
> restrictive) on the same PC with these rights:
>
> user 1 has the possibility to access internet resource
>
> user 2 has not the internet access but he can use lan resource
>
> Any idea?
>
> p.s.: route add/delete in file batch doesn't work cause the restrictions.
>
>
>
> Thk
>
>
>