Home > IT Answers > Networking > Locking out the Internet?
Help

Question

  Asked: Jun 22 2008   8:23 AM GMT
  Asked by: Tvcouch

Locking out the Internet?


Internet, Group Policy, User permissions, Security, Web security, Web browsers, Internet Explorer, GPO

Hey guys, sorry to annoy just wondering how would I Lock a user out of a program E.g. Internet Expplorer but still having it connected to the network, btw this is on WinXP SP 2.

I havve been looking around in the GPO and Local Users and Groups but with no luck.

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window
Help

Answer Wiki (Improve, edit or add to this answer)

IMPROVE THIS ANSWER
View History
 RATE THIS ANSWER
+1
Click to Vote:
  •   1
  •  0
Last Answered: Jun 23 2008  6:18 AM GMT  by Mrdenny


Latest Contributors: Tifflover6, Alessandro.panzetta


Hello TVcouch,
you can do this by applying GPO that disables usage of certain programs based on their HASH values.
Bye


you can also just set up an Internet explorer start up password, so that anyone who tries to open Internet explorer must know the password and that will do some good... hope i was able to help you ....

You can also simply remove the users rights to run the iexplore.exe file via NTFS permissions.

If you have a firewall system such as ISA you can use this to prevent the user(s) from accessing Internet sites while still allowing them to access internal web sites.
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Networking, Microsoft Windows and Security.

Looking for relevant Networking Whitepapers? Visit the SearchNetworking.com Research Library.


RSS - Discussions Help

Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

Rogue  |   Jun 22 2008  12:24PM GMT

For a quick and dirty solution, push a GPO that turns on the needed usage of a proxy in IE, but to a blank server. If you this person to still have internal website access, just add the exclusion to the proxy list. Equals to internal website access, but no external (internet) access

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings

“ProxyEnable”=1 ; activated

 

Tvcouch  |   Jun 23 2008  7:48AM GMT

Thanks for the help. I’ll try the NTFS permisssions, Seems like the easyest way but if you could tell me the path to change the Hash for Internet Explorer, you’d be a legend.