Q

How can I prohibit users from using the Internet by using Group Policy in a Windows 2000 server?

How can I prohibit users from using the Internet by using Group Policy in a Windows 2000 server?

There is not a direct Group Policy setting that disables IE. There are three ways that I can think of to disable it from functioning to connect to the Internet.

The first is using the IE policies. This method breaks IE, but does not prohibit it from running. This solution configures the Proxy Settings incorrectly. Give it a Proxy server name or address that does not exist, or a wrong port to use for the proxy. You can configure this setting under User Configuration|Windows Settings|Internet Explorer Maintenance|Connection|Proxy Settings. IE will look for a Proxy server, but always fail.

The other two ways target the IE application directly. First, you can configure the Don't Run Specified Windows Applications policy, which is located under User Configuration|Administrative Templates|System. Just add in Iexplore.exe to deny IE from running. The second way is to use a Software Restriction policy for Iexplore.exe. You could use a path rule here, but I would suggest using a hash rule, to ensure the file can't be moved or renamed.

This was first published in September 2005

Dig deeper on Microsoft Group Policy Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close