Sign in with
Sign up | Sign in
Your question

Restricting Users From Browsing Internet Sites

Tags:
  • Policy
  • Microsoft
  • Internet
  • Windows
Last response: in Windows 2000/NT
Share
Anonymous
April 7, 2004 2:09:45 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

Is there any way in which I can restrict users in a
Particular OU from not able to browse Internet Sites other
than which I specify. For Example A user should be able to
go to mail.yahoo.com and he should not be able to browse
other websites.

Please let me know how can I block site access???

Regards,
Gautam

More about : restricting users browsing internet sites

Anonymous
April 8, 2004 1:12:24 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

"Gautam" <kakkarg@hotmail.com> said

> Hi,
>
> Is there any way in which I can restrict users in a
> Particular OU from not able to browse Internet Sites other
> than which I specify. For Example A user should be able to
> go to mail.yahoo.com and he should not be able to browse
> other websites.
>
> Please let me know how can I block site access???
>

Set a group policy for proxy settings in Internet Explorer in the OU that
points to a non-existent proxy server (eg 1.1.1.1), then in the same GPO tell
IE to bypass the proxy for the addresses you want to allow.

Andy.
Anonymous
April 8, 2004 1:48:39 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Found this, but never have tried it.

http://www.chrisse.se/MAQB.asp?ID=17

"Gautam" <kakkarg@hotmail.com> wrote in message
news:19cbc01c41cc3$203cc330$a101280a@phx.gbl...
> Hi,
>
> Is there any way in which I can restrict users in a
> Particular OU from not able to browse Internet Sites other
> than which I specify. For Example A user should be able to
> go to mail.yahoo.com and he should not be able to browse
> other websites.
>
> Please let me know how can I block site access???
>
> Regards,
> Gautam
Anonymous
April 16, 2004 6:06:42 PM

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Go to a test computer that has the version of IE you want to control and
also the Windows Adminpak so that you can get to Active Directory Users and
Computers.

Go into Internet Options for IE and on the content tab click on the Content
Advisor settings button.

In the Content Advisor window, click on the Approved Sites tab and enter all
your approved sites http://www.yahoo.com or whatever.

Then click on the General tab, uncheck "Users can see sites that have no
rating" and set the supervisor password

-------WARNING--------

DO NOT LOSE THE SUPERVISOR PASSWORD OR YOU WILL HAVE TO REINSTALL WINDOWS ON
THIS MACHINE.

Click OK out of Content Advisor and ensure to click the enable button on the
content tab of internet options. It will ask you to type in the supervisors
password to enable. Then click ok our of IE options

Test the setup by opening IE and browsing to both restricted and
unrestricted web sites.
If you are happy continue ....

Open AD Users and computers. Browse to the OU that contains the users you
want to restrict. Setup a new GPO for that OU. In the GPO goto:
User Configuration
Windows Settings
Internet Explorer Maintenance
Security

In Security open Security Zones and Content Ratings. Click Import the
current Content Ratings Settings. If you want, you can modify the settings
by clicking the modify button, but I would not recommend this because then
you cannot test the new settings.

Click OK and test the setup with a user that has the GPO applied.

Good luck

Charles


"Gautam" <kakkarg@hotmail.com> wrote in message
news:19cbc01c41cc3$203cc330$a101280a@phx.gbl...
> Hi,
>
> Is there any way in which I can restrict users in a
> Particular OU from not able to browse Internet Sites other
> than which I specify. For Example A user should be able to
> go to mail.yahoo.com and he should not be able to browse
> other websites.
>
> Please let me know how can I block site access???
>
> Regards,
> Gautam
Related resources
!