Ok so say i wanted to put a policy in effect that will not let users get internet connection without 1st logging into the domain? Would i want to have the internet cable come in one network card on the server from cable modem and then out a 2nd one to a switch? 2nd how to i go about this policy?

Got my associates in network administration
that doesn't say much for me :

That's easy to do. Just require they login to the Domain on their computers and don't give them local accounts.

Life's more painless for the brainless.

Sounds simple enough but say they do login to a local account is there a way to stop internet traffic from reaching them or getting sent from them ? unless logged in domain account?

Got my associates in network administration
that doesn't say much for me :

"Just require they login to the Domain "

You don't let them do that [logon locally] via a group policy.

If you want to monitor their access, bandwidth control, etc. you would want to install a proxy server on the server [ISA server for example] and yes you would need two nics in the server.

Imagine the power if you knew how to internet search

So there is a policy so they cant login locally ? would you apply that policy to the machine as opposed to the login ID, cause in the end that is what i want. also a proxy server huh? Is that what i would setup to control the time people can login in at and the sites they caan go to ? Also know of any freeware or can i do it from server 2003?

Learning in progress..........