Group Policy doesn't do internet security. There is a whole other Server for
that - Windows ISA server. However, you may look into a free linux firewall
server or a hardware one. You could block Hotmail's IP on it. ISA is amazing,
but not cheap. I run it in both my networks and it is awesome for "user
access control".
I am pretty sure it can do the Bandwidth but I haven't done it yet. It
definitely logs everything. However the logs can be quite hefty. I love it
because I can block urls with the * (multi) and you don't need the IP's. I
can also make the users authenticate to the Domain before accessing the
Internet. This has pretty much stopped the Laptop users because they can't
use the internet.
I use it to track usage and also to block sites etc. However, we have a 10GB
line all to ourselves so bandwidth isn't an issue even with 2400 users.
That I haven't tried. However, I know you can actually do that in IE alone
(without ISA) with the content advisor. I am not sure if you can set it in
Group Policies at a Domain level but you could write a custom ADM if it isn't
supplied.
Personally I am not too worried about "bad words" and more about the "porn".
We have about 3 levels of filters but some websites still get through so I
block them with ISA.
You can block IP's, part of URL's or entire URL's in ISA. Yes you can block
streaming video and audio. It is quite simple. I love ISA. The tracking
feature is pretty amazing as well as I can track every page each users goes
to by username. I found it very user friendly which I like. I learned
everything by simply going into the tabs and reading the help sections.
Sorry, Didn't read specifically that you wanted steps.
1> Create Firewall Policy.
2> Create an URL list and add the urls with * at the end.
eg. http://www.myserver.com/*
3> In the policy say allow and then put this URL list in the exceptions box.
Cheers,
Lara
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
