Policies

jescab

What Policy do I change so a user can't access the internet?

standalone, in a WorkGroup and in a Domain

crabeater

Where did you find this question? I would hate to see things like this on a test - they are throwing in some trivial things already. Wish they had an intermediate cert, where you show moderate proficiency so you could get entry-level jobs!!

I can think of:
disable the device to access the internet in the user HW profile

MAYBE;
Disconnect clients when logon hours expire -- in Local policy & set their hours to zero -- may work if going through a server

Network access: Sharing and security model for local accounts [then disable Guest]

On your RAS server, you could set the Demand Dial Out Hours to stop them

For that user, change the port numbers so http etc go to the wrong ports



BUT:
SOUNDS like a Johan situation - he might know.

spimonkey

You could use IPSec to block port 80

Here's a cool article on blocking internet, but allowing intranet:
http://www.petri.co.il/block_internet_but_allow_intranet_with_ipsec.htm

jescab

crabeater - this is a forum and no question is a dumb question.....i find your remark degrading to people that do not know how it is done and by the way your response is not correct................if you don't like the question that the person is askin gjust move on no need for a smart remark.