Merv
Tue Feb 13 07:10:16 CST 2007
These links may help...
users disabling firewall client
http://groups.google.com/group/microsoft.public.isaserver/browse_thread/thread/e971996546993d12/737cbb6957cab894?lnk=st&q=prevent+user+from+disabling+ISA+2000+firewall+client+&rnum=2&hl=en#737cbb6957cab894
Automating the Configuration of the Firewall Client: Part 1
http://www.isaserver.org/tutorials/Automating_the_Configuration_of_the_Firewall_Client_Part_1.html
--
Merv Porter [SBS-MVP]
============================
"el" <drop_msg -@- hotmail -DOT- com> wrote in message
news:uqQdpTyTHHA.4744@TK2MSFTNGP02.phx.gbl...
> no, normal user can do that.
>
> "Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
> news:uOGm4qxTHHA.192@TK2MSFTNGP04.phx.gbl...
>> I'm thinking that if you remove him from the local administrators group,
>> he shouldn't be able to disable the firewall clients. Not 100% sure
>> about this.
>>
>> --
>> Merv Porter [SBS-MVP]
>> ============================
>>
>>
>> "el" <drop_msg -@- hotmail -DOT- com> wrote in message
>> news:eXM$wZxTHHA.4260@TK2MSFTNGP06.phx.gbl...
>>> In our environment, user is very easy to disable ISA client (right-click
>>> on the ISA client icon in System Tray and select disable). How can I
>>> stop the user from disable it?
>>>
>>> "Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
>>> news:O$Z6YNxTHHA.3500@TK2MSFTNGP05.phx.gbl...
>>>> Unless the user is somehow disabling or uninstalling the firewall
>>>> client, removing him from the Backoffice Internet Users group should be
>>>> enough. I'm assuming that the workstation is joined to the SBS domain
>>>> and is not in a workgroup. Also assuming that you have 2 network
>>>> adapters in the SBS 2000 server so that ISA 2000 can run in firewall
>>>> mode.
>>>>
>>>> Re-run ICW and see if that makes a difference.
>>>>
>>>> --
>>>> Merv Porter [SBS-MVP]
>>>> ============================
>>>>
>>>> "el" <drop_msg -@- hotmail -DOT- com> wrote in message
>>>> news:eXGUiWwTHHA.4260@TK2MSFTNGP06.phx.gbl...
>>>>> Hi Merv,
>>>>> Thanks for the correction. But the user still can access Internet!!!
>>>>> What should I check in ISA? Are there anysways for users to
>>>>> work-around the BackOffice Internet Users permission?
>>>>>
>>>>> el
>>>>>
>>>>> "Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
>>>>> news:e61wvXqTHHA.1000@TK2MSFTNGP05.phx.gbl...
>>>>>> The correct way to restrict users is the way you've done: remove
>>>>>> them from the BackOffice Internet Users group.
>>>>>>
>>>>>> The ISA firewall client on the workstation is required so that the
>>>>>> client correctly interacts with ISA 2000 on the server. Restricting
>>>>>> the user by not making them a member of the local administrator group
>>>>>> on the computer will also restrict their ability to install/uninstall
>>>>>> programs.
>>>>>>
>>>>>> --
>>>>>> Merv Porter [SBS-MVP]
>>>>>> ============================
>>>>>>
>>>>>> "el" <drop_msg -@- hotmail -DOT- com> wrote in message
>>>>>> news:OCrrPBlTHHA.1212@TK2MSFTNGP03.phx.gbl...
>>>>>> Hi Merv,
>>>>>>
>>>>>> Is creating a Site and Content Rules in ISA server the correct way to
>>>>>> block Internet access?
>>>>>>
>>>>>> Could you explain to me why the workstation needs to have ISA client
>>>>>> running and the user could not have local administrator permissions?
>>>>>>
>>>>>> TIA,
>>>>>> el
>>>>>> "Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
>>>>>> news:elZ%23b8jTHHA.920@TK2MSFTNGP05.phx.gbl...
>>>>>> Assuming ISA 2000 is installed properly and working correctly, that's
>>>>>> the correct way to block internet access for your users.
>>>>>>
>>>>>> Also, make sure the ISA client is running on the workstations. Also
>>>>>> makes sure he does not have local administrator permissions on his
>>>>>> workstation.
>>>>>>
>>>>>> --
>>>>>> Merv Porter [SBS-MVP]
>>>>>> ============================
>>>>>>
>>>>>> "el" <drop_msg -@- hotmail -DOT- com> wrote in message
>>>>>> news:ON4nIuhTHHA.1000@TK2MSFTNGP05.phx.gbl...
>>>>>> Hi all,
>>>>>> I had tried to remove a user from the BackOffice Internet Users
>>>>>> security group to stop him from access Internet but he still could go
>>>>>> to the Internet. Had I done the wrong way? Are there any other ways
>>>>>> to stop him?
>>>>>>
>>>>>> Thanks,
>>>>>> el
>>>>>>
>>>>>
>>>>
>>>>
>>>
>>
>>
>