Restrict Internet Access using GP Computer Config

[fandabbydosey]

Hello,

Is it possible to restrict internet access at the computer configuration level using Group Policy? and/or how can it be done.

Thanks in advance.

Fandab.

 

[fandabbydosey]

Hello,

Sorry, forgot to mention that all computers are setup with a default gateway for internet access. No fancy proxy stuff or software in the middle.

Thanks
Fandab

 

[pgaliardo]

Are you using DHCP to assign IP addresses? What if you just didn't assign the default gateway via DHCP?

 

[ncotton]

one simple way but not too tidy, for just a few specific users to block all http/https/ftp traffic etc, create a GPO with a false proxy address and assign it to all users, then remove the filter for Authenticated users and just add the naughty users.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[Stevehewitt]

Windows does not provide any type of web filtering or proxy services.

However you could use a number of third party tools. Ranging from ISA with SurfControl through to CProxy.

Nowever, if it's cheap and nasty that your looking for then ncotton's solution will work just fine.

(You could always set the proxy to a internal IIS server with a page stating that your web access has been blocked or something to put the wind up naughty users! )

Good Luck,




Steve.

"They have the internet on computers now!" - Homer Simpson

 

[Daveyd123]

I agree with ncotton. Create a GPO to insert 127.0.0.1 to each users IE proxy setting and disable the ability to change proxy settings

GPO for proxy is located at User Config->Internet Explorer Maintenance->Connection->Proxy Settings

GPO for disabling change of Proxy is User Config->Admin Templates->Windows Components->Internet Explorer the choose to disable changing proxy settings