Hey guys. I have searched for over an hour in the group policy trying to figure out a way that I can disable Internet Explorer within one or multiple OU's. For example: A Domain level policy is applied restricting services as needed, but an OU policy is needed for objects within that OU to restrict internet access. I know of only one way this is possible. Proxies? There is a backdoor way to doing this, ie: Removing the shortcut from the desktop.. But you can still access the internet by typing in a web address in my computer etc.. Thanks, and hope this is in the right thread.