n.holifield

I need to prohibit internet access for Terminal Services
client users. The local machines for these users do not
have internet access but if they log on to my server with
Remote Desktop Client, the users all get internet access
through the server which has internet on it. I want to
prohibit that access for normal domain users. Any
suggestions or help appreciated.

Thanks

vera noest [mvp]

You could use AppSec to define a list of approved applications,
and don't give them the right to run Internet Explorer and other
similar apps.

320181 - HOW TO: Use the Application Security Tool to Restrict
Access to Programs in Windows 2000 Terminal Services
http://support.microsoft.com/?kbid=320181

257980 - Appsec Tool in the Windows 2000 Resource Kit Is Missing
Critical Files
http://support.microsoft.com/?kbid=257980

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup ---

arno schoblocher

hi JBailey,


would you pls. specify the exact setting in the GPO where i can do this? i
cannot find anything suitable, maybe i just need new glasses...

thank you

arno

n.holifield

Thanks for the help. This is what I did and it works
fine. I had seen that setting earlier but I just thought
there should be a setting somewhere to "deny internet
access" or "prohibit internet access". I thought this
might be an ugly way to do it but it works very
effectively.


could always use a group

server address, that

attempt to get out and

nholifield

Go to User Configuration, Windows Settings, Internet Explorer, Connection,
Proxy Settings. Just put a bogus address for a proxy server there.
Good luck,
NHolifield

arno schoblocher

thank you!

arno
)