Announcement

Collapse
No announcement yet.

How to control access to domain resources

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to control access to domain resources

    Is there a way to prevent users accessing the Internet or network resources if the machine is not joined the domain Especially that each user has account in the domain and have rights to access the network and the Internet, even if the machine is outside the domain through putting Proxy in browser and enter credential as well as when accessing the shared files


    Is there a way or program to prevent machines from accessing domain resources if it's not joined to he domain???
    </SPAN>

  • #2
    Re: How to control access to domain resources

    Come on People there must be a solution

    try to help me PLZ

    Comment


    • #3
      Re: How to control access to domain resources

      Look into NAP.
      Wesley David
      LinkedIn | Careers 2.0
      -------------------------------
      Microsoft Certifications: MCSE 2003 | MCSA:Messaging 2003 | MCITP:EA, SA, EST | MCTS: a'plenty | MCDST
      Vendor Neutral Certifications: CWNA
      Blog: www.TheNubbyAdmin.com || Twitter: @Nonapeptide || GTalk, Reader and Google+: [email protected] || Skype: Wesley.Nonapeptide
      Goofy kitten avatar photo from Troy Snow: flickr.com/photos/troysnow/

      Comment


      • #4
        Re: How to control access to domain resources

        Thank you Nonapeptide but i think with NAP users still can access internet throw ISA proxy NAP will not stop them
        Is there any software or any thing can stop users accessing internet through ISA if they have domain account but loed in locally ???????????????????

        Comment


        • #5
          Re: How to control access to domain resources

          Restricted groups to remove local accounts?
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: How to control access to domain resources

            Thank you Ossian

            But we can't disable logon locally and if we do users can reinstall windows and logon as local admin

            Comment


            • #7
              Re: How to control access to domain resources

              Remind me NOT to upset your users if they are able to reinstall windows!!!!!
              Sounds as if you need the authentication facilities of ISA server and no direct access to the default gateway
              Tom Jones
              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
              PhD, MSc, FIAP, MIITT
              IT Trainer / Consultant
              Ossian Ltd
              Scotland

              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment


              • #8
                Re: How to control access to domain resources

                when you have over than 400 machine and you work alone it will be so difficult to deny access to bios and change local admin password

                So i'm searching for any thing can help

                I dont think ISA can deny access from machines not joined to domain
                If you know how ISA can do this Plz tell me

                Comment


                • #9
                  Re: How to control access to domain resources

                  http://technet.microsoft.com/en-gb/l.../cc302629.aspx

                  Also note you can change local admin password by script (deploy through GPO as computer startup script)

                  If your users are like that, you have much bigger issues than web filtering
                  Tom Jones
                  MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                  PhD, MSc, FIAP, MIITT
                  IT Trainer / Consultant
                  Ossian Ltd
                  Scotland

                  ** Remember to give credit where credit is due and leave reputation points where appropriate **

                  Comment


                  • #10
                    Re: How to control access to domain resources

                    There are many ways to allow or disallow certain things to the end users.. For example Internet.
                    However It all start at a certain base. If the users reinstall windows at there own, you might get an issue with licenses.
                    Also they are not manageable if they are not domain joined.

                    Personally I would advice you to start at the basics...
                    Marcel
                    Technical Consultant
                    Netherlands
                    http://www.phetios.com
                    http://blog.nessus.nl

                    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                    "No matter how secure, there is always the human factor."

                    "Enjoy life today, tomorrow may never come."
                    "If you're going through hell, keep going. ~Winston Churchill"

                    Comment

                    Working...
                    X