1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved Denial of Internet access on a Network

Discussion in 'Networking (Hardware & Software)' started by muddyfox, 2011/07/15.

  1. 2011/07/15
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    I work in a school where our Internet access is well filtered prior to getting to the workstations. Nevertheless, we occasionally have students who persistently attempt to access unsuitable material. Toward resolving this issue we are educating the4 little dears by denial of use "“ currently by disabling their network account. I have been trying to configure the system (Windows XP Po clients with a MS Server 2008 Domain to have an OU that I can move the students to as a temporary measure to deny them internet access.

    To do this in a new GPO I have set proxy that doesn’t exist. Getting to it by creating the GPO, then going to User configuration >policies > windows settings > Internet Explorer Maintenance > Connection/proxy settings

    That done I then move the student in to a OU where this setting applied. I have ticked Enforce but when the little dear logs on unfortunately (despite doing a gpupdate / force) the access to the internet is still there. What am I not doing?
     
    muddyfox,
    #1
  2. 2011/07/15
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Moved to Networking - I think you may get a better response there :)
     
    PeteC,
    #2
    muddyfox likes this.


  3. to hide this advert.

  4. 2011/07/15
    rsinfo

    rsinfo SuperGeek Alumni

    Joined:
    2005/12/25
    Messages:
    4,076
    Likes Received:
    178
    You can also try a filtering DNS service like OpenDNS. You can create an account & block/unblock categories and/or specific websites.
     
    rsinfo,
    #3
  5. 2011/07/16
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    Thanks petec and rsinfo for your replies. I did ponder for quite a while where to post my thread - as you say this is clearly the logical place. as to filtering - ours is provided by our ISP and is extremely good. What I'm trying to fathom is why my Group Policy for this OU fails to apply?
     
    muddyfox,
    #4
  6. 2011/07/18
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    No further thoughts on this one please folks?
     
    muddyfox,
    #5
  7. 2011/07/19
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Sorry - definitely not my scene :)
     
    PeteC,
    #6
  8. 2011/07/19
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    Thanks for trying anyhow PeteC. Right strange one this - shame I can't get it sorted, I suspect I'll be having grief over it tomorrow when I get asked why the lad still has his access!!
     
    muddyfox,
    #7
  9. 2011/07/20
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    Just go to program files and rename iexplore.exe to iexplore.exe.locked. No more IE for him.

    However, the problem is NOT that the kid can access the Internet when he's been restricted. The problem is that the kid is actually using the Internet when he knows he's not supposed to do so. A student with such a low level of responsibility should not be allowed onto the computer to begin with.

    That the student(s) knowingly access restricted/unsuitable content demonstrates that "denial of Internet use" is not an effective measure at all. Punishment and restriction never educates in the direction of making better students. In fact, it serves to make better "criminals ", for until the wayward student realizes right from wrong in this case, he will continue to find ways to get around the system.

    Sometimes, something as simple as "I don't give a hoot what you do on the Internet at home or elsewhere, but here at school, these are the rules, please adhere to them. Should you violate these rules, detention will be administered in the form of mopping the hallways and bathroom cleaning. "

    ...or your school could implement a morals class.
     
    TonyT,
    #8
  10. 2011/07/20
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    Thanks TonyT.

    Very useful, valid and defo food for thought. However, my problem really is the GP is not applying consistently. Set up a new user yesterday and moved him to my deny internet OU. Ran him up on a Windows 7 PC and walla - no internet access. Tried the little dear on a WX Pro SP 3 machine and Internet access was there. I can't see what it is that would allow that with a brand new user :confused:
     
    muddyfox,
    #9
  11. 2011/07/21
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    In order for the policy to take effect, the user must log off and then log on, else the policy will be null.

    You can also use:

    /User Configuration/Administrative Templates/System/ > Dont Run Specified Windows Applications

    and select IE, Firefox, AOL or any other browser executable.
     
    TonyT,
    #10
  12. 2011/07/21
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    Giving this a try. Greatly appreciated - TVM. :)

     
    muddyfox,
    #11
  13. 2011/07/26
    muddyfox

    muddyfox Well-Known Member Thread Starter

    Joined:
    2011/01/09
    Messages:
    210
    Likes Received:
    4
    Tried all the suggested - still not applying. School now on 6 week holiday so on return I'll be doing a server restart and seeing if that works.
     
    muddyfox,
    #12

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...