Block internet access at certain time through GP 2

[deisehun]

I want to block internet access for certain OU's and only internet access at say lunchtime.

How can I do this through Group Policy?

Thanks..

 

[deisehun]

I right clicked on my Domain in AD - went to Group Policy and added a new policy in under User Config/Windows settings/IE Maintenance/Security/Security Zones & Content rating/Properties/Sites/ - I then added in a few URL's I wanted to block.

I ran SECEDIT /Enforce etc - I cant browse those sites on the DC where I created the policy, but can still browse to those sites on other clients.

Any ideas?

 

[markdmac]

You would need to apply your policy to the workstations.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[deisehun]

Sorry for the stupid question, but how can I apply it to the workstations?

If I run GP Mgt from my workstation and run a query, I have the following under the relevant GPO:

"Winning GPO Blocked URLs policy
These settings were applied only by GPOs that do not contain Internet Explorer Enhanced Security Configuration (ESC) settings because this computer does not have ESC enabled. ESC settings cannot be applied to this computer

 

[deisehun]

I resarted my workstation and re-ran the GPO report. I get the following:

"Denied GPOshide
Name Link Location Reason Denied
Local Group Policy Local Empty
Blocked URLs policy domainname.com
Reason Denied - Empty

 

[deisehun]

On a different client, I can still open the restricted sites (as per my Group Policy), but there is a red circle in the bottom left corner saying 'Restricted sites'
Why is it still allowing me open these sites?

 

[markdmac]

Hmm, not sure why you should see that the site is restricted yet are able to go to it. You might want to look at using some proxy software.

ISA is great, but if you can't afford that you might want to look at this really inexpensive solution.

http://www.youngzsoft.net/ccproxy/.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[deisehun]

Ok, I have it working through Internet Explorer.

This policy doesn't apply to Firefox though - anyone know how I can apply it to Firefox?

Thanks.

 

[markdmac]

You would need to give something like this a try:

http://in-cider.spaces.live.com/blog/cns!1F17474AB1F2CE52!351.entry

Microsoft GPOs do not affect firefox, but the above is a link to a user's efforts to add that functionality.

I have NOT tested the solution, just located it during a search.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.