You can allow or restrict Internet access very granularly using ISA Server. Preventing users from accessing the Internet relying solely on Windows Server and Active Directory can be done by configuring the proxy settings in Internet Explorer group policy objects. This is easier than manipulating the network configuration for each user on each computer, particularly if the users roam from computer to computer.
Discuss This Question: 2  Replies