بستن vpn از طریق گروپ پلیسی

سلام
بعضی از کارمندان شرکت با استفاده ازvpn به اینترنت ازاد دسترسی دارن می خواستم بدانم این امکان هست از طریق گروپ پلیسی یا نرم افزار خاصی بشه جلو گیری کرد و vpn را بست

[LTR]
[LEFT]Configure network connection restrictions with Group Policy

Updated: October 14, 2010
Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 7

You can use this procedure to configure some restrictions on network connections by using Group Policy. These settings are all found in the Group Policy Management Console (GPMC) at the following location:

[B]User Configuration\Administrative Templates\Network\Network Connections[/B]

The following Group Policy settings can be edited and applied to users that are members of the Group Policy object (GPO) in which the Group Policy setting is included. By default, the Group Policy settings are not configured.

[LIST][*] [B]Prohibit deletion of remote access connections[/B]. If you enable this Group Policy setting, then affected users cannot delete any remote access connections, including those they create themselves.[*] [B]Prohibit access to the Remote Access Preferences item on the Advanced menu[/B]. If you enable this Group Policy setting, then affected users cannot access the [B]Remote Access Preferences[/B] setting on the [B]Advanced[/B] menu of the Network Connections folder. The top menu bar, including the [B]Advanced[/B] menu, appears when you press the ALT key.[*] [B]Prohibit access to properties of a LAN connection[/B]. If you enable this Group Policy setting, then affected users cannot change any of the properties of a LAN connection.[*] [B]Ability to change properties of an all user remote access connection[/B]. If you enable this Group Policy setting, then affected users can modify the properties of a remote access connection that is shared with the other users on the computer. By default, standard users can only modify properties for a connection that is not shared.[*] [B]Prohibit connecting and disconnecting a remote access connection[/B]. If you enable this Group Policy setting, then affected users cannot connect by using any remote access connection, or disconnect any that are currently connected.[*] [B]Prohibit changing properties of a private remote access connection[/B]. If you enable this Group Policy setting, then affected users cannot change the remote access connection properties that are not shared. By default, standard users can modify connections that are not shared.[*] [B]Prohibit renaming private remote access connections[/B]. If you enable this Group Policy setting, then affected users cannot rename remote access [B]connections that are not shared. By default, standard users can modify[/B] connections that are not shared.[/LIST]

Membership in the local [B]Administrators[/B] group, or equivalent, is the minimum required to complete this procedure.
[/LEFT]
[B]To open the Group Policy Management Console as an administrator[/B]


[LIST][*] Click [B]Start[/B], then in the Start Search box, type gpmc.msc, but do not press ENTER.[*] When the icon for GPMC.msc appears on the [B]Programs[/B] list at the top of the [B]Start[/B] menu, right-click it, and then click [B]Run as administrator[/B].
If the [B]User Account Control[/B] dialog box appears, ensure it is for the action you requested, and then enter your administrator credentials.
If you edit policy settings locally on a computer, you will affect the settings on only that one computer. If you configure the settings in a Group Policy object (GPO) hosted in an Active Directory domain, then the settings apply to all computers that are subject to that GPO. For more information about Group Policy in an Active Directory domain, see Group Policy ([URL="http://go.microsoft.com/fwlink/?LinkId=55625"]Windows Server Group Policy Home[/URL]).[/LIST]
[B]To enable or disable a Network Connections restriction policy for the current user[/B]


[LIST][*] Log on as the user for which you want to apply these Group Policy settings.[*] Open Group Policy Management Console as an administrator.[*] In the navigation pane, open [B]User Configuration[/B]\[B]Administrative Templates[/B]\[B]Network[/B]\[B]Network Connections[/B].[*] In the details pane, double-click one of the Group Policy settings described above.[*] Do one of the following:
[LIST][*] To enforce the Group Policy setting on the currently logged on user, select [B]Enabled[/B], click [B]Apply[/B], and then click [B]OK[/B].[*] To not enforce the Group Policy setting on the currently logged on user, select [B]Disabled[/B], click [B]Apply[/B], and then click [B]OK[/B].[/LIST]
[*] After you have modified all of the Group Policy settings you want, close Group Policy Management Console.[*] Log off and log back on as the user to enforce the changes you made.[/LIST]
[/LTR]
منبع :
[LEFT][url=http://technet.microsoft.com/en-us/library/cc732613%28WS.10%29.aspx]Configure network connection restrictions with Group Policy[/url]
[/LEFT]

مرسی ایا در 2003 و xp هم می شود از این روش استفاده کرد

[ATTACH=CONFIG]897[/ATTACH]

[LEFT][B]At least Windows 200 SP1[/B][/LEFT]

مرسی از بابت عکس یعنی تو ویندوزهای 2003 هم می شه از این روش استفاده کرد