This is how to disable internet browsing for all users on a certain computer. Our problem here at the University was that we needed four computers on the network to access networked printers, have our anti virus, access mapped drives, etc., but not be able to access the internet. Since we have more than one computer, the best idea for us was to bind these computers together in a group using their names and mac addresses (they are wireless desktops) and then edit the group policy of that group.
First, we will disable internet explorer from being able to browse the internet.
- On your domain controller, right-click the organizational unit that contains your domain users, and select Properties.
- On the Group Policy tab, click Edit.
- Expand User Configuration to set restrictions on a per-user basis.
- Expand Windows Settings, and expand Internet Explorer Maintenance.
- Select Connection, and double-click Proxy Settings.
- Select the Enable Proxy Settings check box, add 0.0.0.0 to the HTTP entry, and click OK.
- Expand Administrative Templates, and expand Windows Components.
- Select Internet Explorer, and double-click Disable Changing Proxy Settings.
- Select Enabled, and click OK.
Remember that Enabled sets a restriction, Disabled prevents a restriction from applying to a group of users (even if you enable it for a broader category of users), and Not Configured doesn’t set the restriction.
The above is from “Learn two ways to disable internet explorer” from TechRepublic.
Next, just to be on the safe side, we are disabling changes from happening within Internet Options.
- Click “User Configuration.” Expand “Administrative Templates > Windows Components > Internet Explorer.” Click the “Control Panel” folder but do not expand it.
- Double-click the first tab of the “Internet Options” dialog that you want to disable to open the “Properties” dialog box for that tab.
- Go to the “Settings” tab of the dialog box. Select the “Disabled” button. Click “OK.”
- Open the “Properties” dialog for each subsequent tab of Internet Options you want to disable and select the “Disabled” button on the “Settings” tab. Close the “Local Group Policy Editor” window when finished.
This is from eHow.
Since our student users don’t have administrative privileges over the computers, there’s no worry of them installing another browser.
Hope this helps someone!