how can I assign permissions for an application

Greetings Everyone,
I have a Windows 2000 Domain with several XP pro workstations. How can I go
about assigning permissons for Internet Explorer , this is to block a single
domain user account from surfing the web? Thank you.
Joe

Go to C:\Program Files\Internet Explorer and find IEXPLORE.EXE Right-click
and select properties and click on the Security Tab.

Add the user account to the list and select Full Control and check Deny.
That will prevent them from running Internet Explorer. It may have some
other detrimental effects so I'd suggest testing it first

--

Rodney Buike MCSE 2000/2003
http://thelazyadmin.com


"Joe" <jbcandullo(nospam)@mmadisonservices.com> wrote in message
news:(E-Mail Removed)...
> Greetings Everyone,
> I have a Windows 2000 Domain with several XP pro workstations. How can I
> go about assigning permissons for Internet Explorer , this is to block a
> single domain user account from surfing the web? Thank you.
> Joe
>

The user will still be able to surf the web even if they can not execute
Internet Explorer. Other options are to assign that user a bogus proxy
server IP address, such as 127.0.0.1, and also use Group Policy to prevent
them from accessing the connections page for Internet Explorer. If the user
uses the same computer all the time and other users on that computer do not
need internet access you can create an ipsec filtering policy for that
computer, give it a bogus default gateway, or block it's internet access at
the firewall assuming it has a static IP and the user can not change the IP
address. If you happen to be using ISA server as the internet gateway,
computers configured with the Firewall Client or as a web proxy can be
blocked based on user or group membership. --- Steve


oe" <jbcandullo(nospam)@mmadisonservices.com> wrote in message
news:(E-Mail Removed)...
> Greetings Everyone,
> I have a Windows 2000 Domain with several XP pro workstations. How can I
> go about assigning permissons for Internet Explorer , this is to block a
> single domain user account from surfing the web? Thank you.
> Joe
>