Re: OT: restricting user internet access [win server 2003]

They're worried about employees downloading copyrighted material, but not about installing a bootleg copy of windows? Interesting.
Why not set them up with IP Cop or Smoothwall and make use of squid in conjunction with Dan's Guardian to do a little restricting?

Jim Gribbin

----- Original Message -----
From: Clay Scott <rudeboy@gci.net>
Date: Tuesday, March 21, 2006 7:13 pm
Subject: OT: restricting user internet access [win server 2003]

> i'm sure some people on the list are familiar with windows server
> 2003... hopefully.
>
> my mom is helping out a friend's small business and they're
> worried about a new employee who keeps using the computers at work
> to download copyrighted media. the owners are far from computer
> literate so they had one of their family members set up a basic
> server/client network in their office running windows server 2003
> with windows 2000 clients. they didn't know that it not being
> properly licensed copies would be an issue, but for right now they
> just want to be able to restrict employee's internet access on a
> per-user basis.
>
> after much reading i installed the 'Group Policy Management
> Console' added a new policy called 'Internet-Restricted Employee',
> enabled 'Restrict Internet Communication' and added a test user to
> the policy. from what i can tell it should be working fine. groups
> are handled differently and quite silly on server'03 and i'm not
> sure if i had the test user's group properly applied to the
> security policy so i removed the group and added users to it
> individually.
> problem is it didn't work. i've never messed with windows server
> so i'm trying to learn as i go. everything i find online says
> using GPMC is the only way to do this, but for the life of me i
> can't figure out why it's not working. i was hoping i could set it
> up and show them where they could simply add a user, go to the
> security policy and add the user's account to have it take effect.
> if anyone knows how to do this or can point me to a better
> resource or a more in-depth howto on the subject i'd really
> appreciate it.
>
> thanks,
> ~clay
>
> p.s. i'm not being paid for this job. i'm just helping out a
> friend of the family... that is, if i get it done.
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>

-- Binary/unsupported file stripped by Ecartis --
-- Type: text/x-vcard
-- File: jgribbin@alaska.net.vcf
-- Desc: Card for <jgribbin@alaska.net>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Tue Mar 21 20:09:17 2006