how to deny internet to particular group

i have windows 2003 and 10 thin client thin client
connect to the server through terminal services RDP
protocol and i have created three types of groups one can
access its data another can access only its data but i
want they cannot access internet at all and the last
group will have the internet access but it will not have
the access to the data at all. data access i have already
done the only thing is bothering me is how do i deny
internet to particular group. if you know then please
mail me at anil_inscol@yahoo.com i will be greatly
thankful to you if you dont you then thanks to you for
showing the concern to my query

thanking you

anil k verma

Miha
Sun Aug 08 12:28:56 CDT 2004

Hi,

do you have active directory set up by any change? In case you have you can
solve this by using different OU (Organization Unit).

Second option that I see as possible solution is use of Microsoft ISA
firewall that would allow only certain users access to internet.

If you don't have AD or ISA setup, take a look at SBS (Small Business
Server) that offers all these features (AD, ISA firewall) for small
environments like yours.

Mike

"ANIL K VERMA" <anil_inscol@yahoo.com> wrote in message
news:20eb01c47d5a$ac96f740$a301280a@phx.gbl...
> i have windows 2003 and 10 thin client thin client
> connect to the server through terminal services RDP
> protocol and i have created three types of groups one can
> access its data another can access only its data but i
> want they cannot access internet at all and the last
> group will have the internet access but it will not have
> the access to the data at all. data access i have already
> done the only thing is bothering me is how do i deny
> internet to particular group. if you know then please
> mail me at anil_inscol@yahoo.com i will be greatly
> thankful to you if you dont you then thanks to you for
> showing the concern to my query
>
> thanking you
>
> anil k verma

Dick
Sun Aug 08 13:01:43 CDT 2004


"ANIL K VERMA" <anil_inscol@yahoo.com> wrote in message
news:20eb01c47d5a$ac96f740$a301280a@phx.gbl...
> i have windows 2003 and 10 thin client thin client
> connect to the server through terminal services RDP
> protocol and i have created three types of groups one can
> access its data another can access only its data but i
> want they cannot access internet at all and the last
> group will have the internet access but it will not have
> the access to the data at all. data access i have already
> done the only thing is bothering me is how do i deny
> internet to particular group. if you know then please
> mail me at anil_inscol@yahoo.com i will be greatly
> thankful to you if you dont you then thanks to you for
> showing the concern to my query
>
> thanking you
>
> anil k verma

Just to let you know, the period(.) is not working on your keyboard.

Dick Kistler

Chuck
Sun Aug 08 17:14:05 CDT 2004

On Sun, 8 Aug 2004 14:01:43 -0400, "Dick Kistler" <dickkist@nospam-hotmail.com>
wrote:

>
>"ANIL K VERMA" <anil_inscol@yahoo.com> wrote in message
>news:20eb01c47d5a$ac96f740$a301280a@phx.gbl...
>> i have windows 2003 and 10 thin client thin client
>> connect to the server through terminal services RDP
>> protocol and i have created three types of groups one can
>> access its data another can access only its data but i
>> want they cannot access internet at all and the last
>> group will have the internet access but it will not have
>> the access to the data at all. data access i have already
^
>> done the only thing is bothering me is how do i deny
>> internet to particular group. if you know then please
>> mail me at anil_inscol@yahoo.com i will be greatly
>> thankful to you if you dont you then thanks to you for
>> showing the concern to my query
>>
>> thanking you
>>
>> anil k verma
>
>Just to let you know, the period(.) is not working on your keyboard.
>
>Dick Kistler

s/Working/working consistently/

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

bielot
Mon Aug 09 21:03:00 CDT 2004

Another way to do it would be to create 2 DHCP scopes. In the 'thin client'
scope, do NOT define a gateway. No Gateway, no Internet access. Then in the
thin client scope, reserve each address used by the thin clients, so that
they always get an IP in that scope.

John

On Sun, 8 Aug 2004 08:16:26 -0700, ANIL K VERMA wrote:

> i have windows 2003 and 10 thin client thin client
> connect to the server through terminal services RDP
> protocol and i have created three types of groups one can
> access its data another can access only its data but i
> want they cannot access internet at all and the last
> group will have the internet access but it will not have
> the access to the data at all. data access i have already
> done the only thing is bothering me is how do i deny
> internet to particular group. if you know then please
> mail me at anil_inscol@yahoo.com i will be greatly
> thankful to you if you dont you then thanks to you for
> showing the concern to my query
>
> thanking you
>
> anil k verma

Miha
Tue Aug 10 01:10:29 CDT 2004

Hi,

This won't work. Clients use their thin clients to connect to server using
RDP. Then they access to the internet from the server.
To use your option he would have to remove default gateway from server, but
this would also deny access to the internet to using this server.

Mike

"bielot@sbcglobal.net" <jbielot@yahoo.com> wrote in message
news:npiiyhfn3xep$.bb46aom0u3u5$.dlg@40tude.net...
> Another way to do it would be to create 2 DHCP scopes. In the 'thin
client'
> scope, do NOT define a gateway. No Gateway, no Internet access. Then in
the
> thin client scope, reserve each address used by the thin clients, so that
> they always get an IP in that scope.
>
> John
>
> On Sun, 8 Aug 2004 08:16:26 -0700, ANIL K VERMA wrote:
>
> > i have windows 2003 and 10 thin client thin client
> > connect to the server through terminal services RDP
> > protocol and i have created three types of groups one can
> > access its data another can access only its data but i
> > want they cannot access internet at all and the last
> > group will have the internet access but it will not have
> > the access to the data at all. data access i have already
> > done the only thing is bothering me is how do i deny
> > internet to particular group. if you know then please
> > mail me at anil_inscol@yahoo.com i will be greatly
> > thankful to you if you dont you then thanks to you for
> > showing the concern to my query
> >
> > thanking you
> >
> > anil k verma