Internet access

I would like to block internet access via the sbs2k
server for certain computers on the network. I have
blocked by user, but then users share their
username/passwords to gain internet access on their pc's.
I need access blocked by computer name as well. The
guilty party who shares his password is an administrator
as well.

Please assist.

Thnx

Chris
Thu Nov 20 12:04:58 CST 2003

Well, you could create an client address set and put the IP's for the
machines that you want to have access and then go to the protocol rules and
change the 'BackOffice Internet Access Protocol Rule applies to' to client
address set and use the set you just created. Or better yet, create a deny
client list and make a rule that denies access for those IP's. I'm not 100%
that this will work, but it should get you started in the right direction.
Also, if the other guy is the admin, he possibly could undo the change or
work around it rules. If I had an admin that was doing that, person would no
longer be an admin. Sharing the admin password is a huge security risk IMO.
Also, if you are using DHCP, the IP's might change around.


"Gerald" <anonymous@discussions.microsoft.com> wrote in message
news:000201c3af80$57380670$a301280a@phx.gbl...
> I would like to block internet access via the sbs2k
> server for certain computers on the network. I have
> blocked by user, but then users share their
> username/passwords to gain internet access on their pc's.
> I need access blocked by computer name as well. The
> guilty party who shares his password is an administrator
> as well.
>
> Please assist.
>
> Thnx
>
>

dilltech
Thu Nov 20 17:22:27 CST 2003

I believe that you have a MANAGEMENT problem NOT a
technology problem.

If your company has an acceptable use policy for email and
internet and for that matter, ANY company owned resource
(company cars/laptops/anything) distribute it to ALL
employees, have them sign it nd then ENFORCE IT! If you
do NOT HAVE these policies... it is really time to do so!

A rogue employee with admin access to your network is an
IT nightmare.

by the way, before you call me an idiot and claim what i
am telling you is impractical, I have been involved with
computers, programming, infrastructure since 1969. The
last 23 of those years as an INDEPENDENT CONSULTANT.

YOU as the manager of the corporate IT resources MUST
convince management to BE STRONG and protect the company
assets.

RickD

>-----Original Message-----
>I would like to block internet access via the sbs2k
>server for certain computers on the network. I have
>blocked by user, but then users share their
>username/passwords to gain internet access on their pc's.
>I need access blocked by computer name as well. The
>guilty party who shares his password is an administrator
>as well.
>
>Please assist.
>
>Thnx
>
>
>.
>