Help with group policies

[sibusisom]

I need to be able to stop streaming media on media player as well as downloads on internet explorer.

My setup:

Domain controller 2003 Std

WSUS server for updates

Netgear router with 3G connection

25 Computers for normal users(employees)

10 computers open to the public for use mostly to do their resumes, type, learn to use the computer and access the internet.

Here's my problem.

I need to create a GPO for the public computers to stop them from using streaming media as well as downloading music and other ugly thing that do not comply.

what i have tried is:

Create a GPO for public and normal users but my problem is that i'm failing to stop anything from filtering down from default domain GPO because the rest of my domain gets affected by the new settings even when i said the GPO must not be overridden.

Where am i going wrong? Pls help.

 

[yebolinux]

Hi
Why you do not try to use security Gateway like Untangle:

http://www.untangle.com/Product-Overview

So not just control users, and group but more security options, filtering, firewall and more, in you need help let us know

http://www.newageholdings.com

 

[Venomous]

Will not stop people:

Put up a sign that says no pr0nz & other such stuff allowed or they will be asked to leave. (to many to block effectively)

Then block youtube, itunes other popular music sites.

Also you need to register with FPB. Don't shoot me. This has become law for internet cafe's to also have. Must pay them also if you sell games. They will give you a FAT fine if you are not registered.
we got visited by them , luckily the person could see we did not know so we got given forms & warning about 2 years ago.

 

[PallBearer]

get your self an ISA server up and running. that way you can controll authenticated users vs everyone else.
very easy to setup and maintain.

 

[sibusisom]

Hi
Why you do not try to use security Gateway like Untangle:

http://www.untangle.com/Product-Overview

So not just control users, and group but more security options, filtering, firewall and more, in you need help let us know

http://www.newageholdings.com

Thanks, i'm downloading the app as we speak it is 447MB ISO file, hope it wont be a waste of time energy and bandwidth. I will test drive it on my lab when done just to see how it can help me, damn i hate security

At Pallbearer, i have ISA server 2004 somewhere on my CD pack and i never really thought of using it ever since i got hold of it, don't really mind at this stage to have a go at it.

I will report back. Thanks guys.

 

[thisgeek]

Create a new OU for the public computers and user ids and link your restrictive GPO there. Remember to move the machines and users into that OU.