Charlie
Tue May 06 07:30:55 PDT 2008
If you look at your Firewall Policies, you'll see that the default last rule
is deny all. You need to create two (or more) user "sets" - one will be the
full access set, the others will be those who are restricted. The "SBS
Internet Users" group is already there, and should be those who have full
access - that rule is there. But your restricted users should not be part of
that user set, and thus they will "fall through" to the default deny all
rule. Now, create the group (or groups) of users for whom you'll want to
restrict access to certain sites. Also create URL or Domain sets that define
those sites you want to allow them. Now, create an access rule that allows
the restricted users to access the specific sites.
--
Charlie.
http://msmvps.com/xperts64
http://mvp.support.microsoft.com/profile/charlie.russel
"Craig Kalugin" <CraigKalugin@discussions.microsoft.com> wrote in message
news:2FEAD284-237D-4550-9B28-FC179EDDAB41@microsoft.com...
> We have ISA 2004 installed W/SBS 2003 . I would like to control internet
> access. I would have some users with full access to the internet and i
> would
> like to allow only certain web sites for other users (all different). What
> is
> the easiest way to set this up. I had it set up in ISA 2000, but when we
> upgraded, i seem to have lost all that configuration. I have read alot of
> posts, but they all seem to refer to blocking certain sites, not allowing
> certain sites.