Restrict Internet usage for users
How can I restrict the usage of the Internet when our DHCP server supplies
all the necessary IPs including gateway and DNS? I tried to put 0.0.0.0 as proxy setting in local
Group Policy in the Internet connection, but they still can browse the Internet using firefox. We
are not allowed to used Group Policy.
Restricting any user behavior is going to be very difficult if your users are logging in as
full administrators rather than limited users, regardless of whether you're using local policies or
AD-applied Group Policy permissions. The first thing you can and should do is created limited-user
accounts for them, which will prevent them from installing other software (like Firefox). That
should prevent them from making changes to the system.
(If you want to use Firefox but want to lock down the settings, look into the recommendations in
the Institutional Deployment article in the
Unless you leverage the technologies that exist in Windows to make these things possible, you're
going to be playing an endless game of catch-up with your users.
This was first published in December 2006