Home All Groups Group Topic Archive Search About
Author
18 Oct 2006 3:52 PM
Asif Shah
Hello,

At my old job we had a group (security group) called WWW in Active Directory
which would allow users to have internet access. Without that group added to
the user's profile/account the user was not able to access the internet. I
want to do that at my new job but I am not sure how this was setup. Please
ideas??? I believe this can be done via group policy. Hope to hear from
someone soon. Thanks.

Author
18 Oct 2006 3:58 PM
T. Uranjek
Hi!

Did you have ISA server as well? ISA can allow internet access based on
group membership.

Toni

Show quoteHide quote
"Asif Shah" <Asif S***@discussions.microsoft.com> wrote in message
news:C04C0A3F-44D5-408E-BE9C-90151830B640@microsoft.com...
> Hello,
>
> At my old job we had a group (security group) called WWW in Active
> Directory
> which would allow users to have internet access. Without that group added
> to
> the user's profile/account the user was not able to access the internet. I
> want to do that at my new job but I am not sure how this was setup. Please
> ideas??? I believe this can be done via group policy. Hope to hear from
> someone soon. Thanks.
Author
18 Oct 2006 4:02 PM
Norbert Fehlauer [MVP]
Asif Shah wrote:
Hi,

> sure how this was setup. Please ideas??? I believe this can be done
> via group policy.

Hopefully it was not done by GPOs. With GPOs you can set the IE Proxy to a
fictious value and the user isn't able to sur with the IE and the IE only.
Thunderbird or other browsers do not use those proxy entries.
If you have a proxy server with authentification (like MS ISA) then you can
add your users to a group and allow this group access to the internet.

Bye
Norbert
Author
18 Oct 2006 4:27 PM
Asif Shah
Thanks for the reply. We dont have a proxy server here. Any other way? How
can I do it via GPO?

Show quoteHide quote
"Norbert Fehlauer [MVP]" wrote:

> Asif Shah wrote:
> Hi,
>
> > sure how this was setup. Please ideas??? I believe this can be done
> > via group policy.
>
> Hopefully it was not done by GPOs. With GPOs you can set the IE Proxy to a
> fictious value and the user isn't able to sur with the IE and the IE only.
> Thunderbird or other browsers do not use those proxy entries.
> If you have a proxy server with authentification (like MS ISA) then you can
> add your users to a group and allow this group access to the internet.
>
> Bye
> Norbert
>
>
Author
18 Oct 2006 5:46 PM
Norbert Fehlauer [MVP]
Asif Shah wrote:
> Thanks for the reply. We dont have a proxy server here. Any other
> way? How can I do it via GPO?

You can't.

Bye
Norbert
--
Dilbert's words of wisdom #11: Last night I lay in bed looking up at
the stars in the sky and I thought to myself, "Where the heck is the
ceiling?!