We recently changed to NT DHCP to assign IP addresses and other config info. Is it possible to somehow stop certain users from accessing the Internet, without giving them static addresses. We want to keep using DHCP.
What would be the simplest way to do this?
How many users do you need to stop? If it is just a few then I would set just those to static.
You could go to the individual machines and delete the iexplore.exe, or if you have the machines on ntfs, you could create a group and call it NO_IE or something like that, add the users to that group, then either connect through the network to the root drive of the individual computers through the hidden administrative share \\computername\c$ or go to each individual machine and add the noaccess permission for that group to the ie folder.
You could also setup a domain group policy to only allow certain applications to be run by those users. Just create a group, add the users to that group, then create the run list in the domain policies.
On NT, 2000 and XP stations, as long as they are only in the ordinary users group, they cannot change those settings. Leave them out of the power users and administrators groups and they cannot change network settings.
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!