Restrict Internet Access to Workstations

[Mark Talbot]

I am new to Group Policy's and I am trying to see if I
can restrict Internet access from certain Workstations in
our Domain. I have tried removing Iexplore.exe but
access can still be gained through My Computer. Can
anyone help?

Regards

Mark

 

[NO_MSC_NO_MSCP_NO_MSENGINEER]

if you have a proxy set the users that can navigate to the value thorugh
GPO. And for the users that cannot navigate set it to blank, and then using
GPO also Hide the tab of IE.

If you don't have proxy set gateway properly for users that can navigate
(manually :-(( )

 

[Chriss3]

There is a better way than fake a proxy.

How to restrict internet access Domain wide or for a single Site or OU with
Group Policies:
http://www.chrisse.se/MAQB.asp?ID=17

 

[Guest]

Hi Chris,

This is fine if you want to block Internet Access to all
users on the same domain or restrict down to specific Web
Sites. However, I only wish to prevent certain
Users/Workstations from gaining access, without affecting
the remaining authorised users.

Regards

Mark

 

[Steven L Umbach]

You can add those workstations to an OU and then create a GPO with an ipsec filtering
policy which is configured at the computer level and can block all outgoing traffic
other than the lan which will prevent using alternative browsers, chat programs, file
swapping programs, etc. You start with a mirrored block all policy, add a mirror
permit all rule for the lan subnet and you are done. If you ever want to allow any
internet access you can create another rule with the port/protocol/addresses allowed.
See the link below for more info. --- Steve

http://www.securityfocus.com/infocus/1559

 

[jaimin]

Hi there MArk

Have you tried Browse Control www.browsecontrol.com

That will allow you to block internet for the workstations you choose
(you can also do other things with it, such as schedule it to be on at
certain times of day).

Hope that helps!
Divyesh