locked
user permissions RRS feed

  • Question

  • hi,

    My question is i want to give permissinos to 10users to do calls to abroad and those users cannot upload any of the data from the system and they cannot access

    reggular website such as yahoo,gmail,facebook. So please help me out.

    Thank you very much,

    raj.

    Thursday, September 6, 2012 5:39 PM

Answers

  • Hi,

    I'm not sure about making calls to abroad. However you can restrict some websites using Group Policy settings (Assuming you are using 2008 OS). Please check the following link to accomplish it.

    How To Use Group Policy to Allow or Block URLs

    • Proposed as answer by Sandesh Dubey Friday, September 7, 2012 4:18 AM
    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Thursday, September 6, 2012 6:01 PM
  • Disabling interenet access from GPO is not reliable step instead you will require proxy server or firewall to control the same centrally.TMG or ISA Server will suit the requirement.
    http://social.technet.microsoft.com/Forums/en/winserverGP/thread/e223c2f4-c4ab-4dc5-b475-8cbd0b107eea

    There is a facility within GP (under User Config/Windows Settings/IE Maintenance Policy) to implement what are called Content Ratings for IE. In that policy area, you can restrict or allow specific URLs. But of course, this only covers IE--not any other browsers that a user may install.

    Reference link:
    http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/7f0da13d-5224-4adf-83e2-5cf5ad265fe9
    http://itknowledgeexchange.techtarget.com/itanswers/block-ie-or-internet-access-with-group-policy/

    Regarding users to do calls to abroad you need to conatact to concern team(network) to get it done.

    Hope this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 4:27 AM
  • Hi,

    Regarding permission of disable uploading, I think you can restrict users to upload files to some specific location, for example, desktop. You can use some logon scripts to remove Modify permission from Desktop folder. You have to set read-only permission to users on every folder you don't want them to save files.

    The Icacls.exe utility is available for Windows Server 2003 with Service Pack 2
    http://support.microsoft.com/kb/919240

    Restrict browing URL you can refer to good links others have posted. As to call abroad you need contact other teams like Sandesh said.

    Regards,
    Cicely

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 6:32 AM
  • hi,

    My question is i want to give permissinos to 10users to do calls to abroad and those users cannot upload any of the data from the system and they cannot access

    reggular website such as yahoo,gmail,facebook. So please help me out.

    Thank you very much,

    raj.

    The post has nothing to do with directory services. Denying internet permission for specific website or restricting outgoing call is not something can be handled effectively within the AD. If you are talking about restricting the call using OCS or Lync, then those settings lie with the OCS/LYNC server not within the AD.

    Restricting the website can be done by ISA/TMG/UMG or websese devices. You need to have firewall devices to control websites usage by blocking the URL or port.


    Awinish Vishwakarma - MVP

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 9:14 AM

All replies

  • Hi,

    I'm not sure about making calls to abroad. However you can restrict some websites using Group Policy settings (Assuming you are using 2008 OS). Please check the following link to accomplish it.

    How To Use Group Policy to Allow or Block URLs

    • Proposed as answer by Sandesh Dubey Friday, September 7, 2012 4:18 AM
    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Thursday, September 6, 2012 6:01 PM
  • Disabling interenet access from GPO is not reliable step instead you will require proxy server or firewall to control the same centrally.TMG or ISA Server will suit the requirement.
    http://social.technet.microsoft.com/Forums/en/winserverGP/thread/e223c2f4-c4ab-4dc5-b475-8cbd0b107eea

    There is a facility within GP (under User Config/Windows Settings/IE Maintenance Policy) to implement what are called Content Ratings for IE. In that policy area, you can restrict or allow specific URLs. But of course, this only covers IE--not any other browsers that a user may install.

    Reference link:
    http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/7f0da13d-5224-4adf-83e2-5cf5ad265fe9
    http://itknowledgeexchange.techtarget.com/itanswers/block-ie-or-internet-access-with-group-policy/

    Regarding users to do calls to abroad you need to conatact to concern team(network) to get it done.

    Hope this helps


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 4:27 AM
  • Hi,

    Regarding permission of disable uploading, I think you can restrict users to upload files to some specific location, for example, desktop. You can use some logon scripts to remove Modify permission from Desktop folder. You have to set read-only permission to users on every folder you don't want them to save files.

    The Icacls.exe utility is available for Windows Server 2003 with Service Pack 2
    http://support.microsoft.com/kb/919240

    Restrict browing URL you can refer to good links others have posted. As to call abroad you need contact other teams like Sandesh said.

    Regards,
    Cicely

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 6:32 AM
  • hi,

    My question is i want to give permissinos to 10users to do calls to abroad and those users cannot upload any of the data from the system and they cannot access

    reggular website such as yahoo,gmail,facebook. So please help me out.

    Thank you very much,

    raj.

    The post has nothing to do with directory services. Denying internet permission for specific website or restricting outgoing call is not something can be handled effectively within the AD. If you are talking about restricting the call using OCS or Lync, then those settings lie with the OCS/LYNC server not within the AD.

    Restricting the website can be done by ISA/TMG/UMG or websese devices. You need to have firewall devices to control websites usage by blocking the URL or port.


    Awinish Vishwakarma - MVP

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by Cicely Feng Monday, September 10, 2012 7:05 AM
    Friday, September 7, 2012 9:14 AM