lock user to access the Internet

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,
I knew it by chance that a user who didn't belong to BackOffice Internet
User group could access the Internet from his user account. I believed he
used other users account/password when IE prompted him for user name and
password. How can I stop him from doing this? Was it really the way he
did? Was there any other ways he could 'bypass' policy setting?
el

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

el wrote:
> Hi,
> I knew it by chance that a user who didn't belong to BackOffice
> Internet User group could access the Internet from his user account.
> I believed he used other users account/password when IE prompted him
> for user name and password. How can I stop him from doing this?

Make sure you have regular forced password changes, and make sure people
don't know other people's passwords or write their own down on stickies
attached to their monitors.

> Was
> it really the way he did?

Possibly - can't say.

> Was there any other ways he could 'bypass'
> policy setting?
> el

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

There are several ways to control who can get to the internet and who cant.

One of the more natural ways is to use ISA 2000 Server. Now, this can be a
bit expensive.

Another way is to create a group policy that (1) inputs a fake proxy address
( make sure that it is a bad IP Address ) and (2) disables the users
possibility to change that fake proxy IP Address. But, this simply allows /
disallows connectivity to the Internet.

HTH,

Cary

"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:ePI3VDiwEHA.3624@TK2MSFTNGP09.phx.gbl...
> Hi,
> I knew it by chance that a user who didn't belong to BackOffice Internet
> User group could access the Internet from his user account. I believed he
> used other users account/password when IE prompted him for user name and
> password. How can I stop him from doing this? Was it really the way he
> did? Was there any other ways he could 'bypass' policy setting?
> el
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

we have ISA 2k server. How do I set it up?

"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:%23JuFf50wEHA.2908@tk2msftngp13.phx.gbl...
> There are several ways to control who can get to the internet and who
cant.
>
> One of the more natural ways is to use ISA 2000 Server. Now, this can be
a
> bit expensive.
>
> Another way is to create a group policy that (1) inputs a fake proxy
address
> ( make sure that it is a bad IP Address ) and (2) disables the users
> possibility to change that fake proxy IP Address. But, this simply allows
/
> disallows connectivity to the Internet.
>
> HTH,
>
> Cary
>
> "el" <drop_msg -@- hotmail -DOT- com> wrote in message
> news:ePI3VDiwEHA.3624@TK2MSFTNGP09.phx.gbl...
> > Hi,
> > I knew it by chance that a user who didn't belong to BackOffice Internet
> > User group could access the Internet from his user account. I believed
he
> > used other users account/password when IE prompted him for user name and
> > password. How can I stop him from doing this? Was it really the way he
> > did? Was there any other ways he could 'bypass' policy setting?
> > el
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

El,

It has been awhile since I have done this but you would use security groups
to do this. I might suggest that you use the help or that you post to the
ISA news group.

HTH,

Cary

"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:%23lx3esfxEHA.3108@TK2MSFTNGP14.phx.gbl...
> we have ISA 2k server. How do I set it up?
>
> "Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
> news:%23JuFf50wEHA.2908@tk2msftngp13.phx.gbl...
> > There are several ways to control who can get to the internet and who
> cant.
> >
> > One of the more natural ways is to use ISA 2000 Server. Now, this can
be
> a
> > bit expensive.
> >
> > Another way is to create a group policy that (1) inputs a fake proxy
> address
> > ( make sure that it is a bad IP Address ) and (2) disables the users
> > possibility to change that fake proxy IP Address. But, this simply
allows
> /
> > disallows connectivity to the Internet.
> >
> > HTH,
> >
> > Cary
> >
> > "el" <drop_msg -@- hotmail -DOT- com> wrote in message
> > news:ePI3VDiwEHA.3624@TK2MSFTNGP09.phx.gbl...
> > > Hi,
> > > I knew it by chance that a user who didn't belong to BackOffice
Internet
> > > User group could access the Internet from his user account. I
believed
> he
> > > used other users account/password when IE prompted him for user name
and
> > > password. How can I stop him from doing this? Was it really the way
he
> > > did? Was there any other ways he could 'bypass' policy setting?
> > > el
> > >
> > >
> >
> >
>
>