Restricting Users From Browsing Internet Sites

  • Thread starter Thread starter Gautam
  • Start date Start date
G

Gautam

Hi,

Is there any way in which I can restrict users in a
Particular OU from not able to browse Internet Sites other
than which I specify. For Example A user should be able to
go to mail.yahoo.com and he should not be able to browse
other websites.

Please let me know how can I block site access???

Regards,
Gautam
 
Gautam said:
Hi,

Is there any way in which I can restrict users in a
Particular OU from not able to browse Internet Sites other
than which I specify. For Example A user should be able to
go to mail.yahoo.com and he should not be able to browse
other websites.

Please let me know how can I block site access???
Click to expand...

Set a group policy for proxy settings in Internet Explorer in the OU that
points to a non-existent proxy server (eg 1.1.1.1), then in the same GPO tell
IE to bypass the proxy for the addresses you want to allow.

Andy.
 
Go to a test computer that has the version of IE you want to control and
also the Windows Adminpak so that you can get to Active Directory Users and
Computers.

Go into Internet Options for IE and on the content tab click on the Content
Advisor settings button.

In the Content Advisor window, click on the Approved Sites tab and enter all
your approved sites http://www.yahoo.com or whatever.

Then click on the General tab, uncheck "Users can see sites that have no
rating" and set the supervisor password

-------WARNING--------

DO NOT LOSE THE SUPERVISOR PASSWORD OR YOU WILL HAVE TO REINSTALL WINDOWS ON
THIS MACHINE.

Click OK out of Content Advisor and ensure to click the enable button on the
content tab of internet options. It will ask you to type in the supervisors
password to enable. Then click ok our of IE options

Test the setup by opening IE and browsing to both restricted and
unrestricted web sites.
If you are happy continue ....

Open AD Users and computers. Browse to the OU that contains the users you
want to restrict. Setup a new GPO for that OU. In the GPO goto:
User Configuration
Windows Settings
Internet Explorer Maintenance
Security

In Security open Security Zones and Content Ratings. Click Import the
current Content Ratings Settings. If you want, you can modify the settings
by clicking the modify button, but I would not recommend this because then
you cannot test the new settings.

Click OK and test the setup with a user that has the GPO applied.

Good luck

Charles
 
Back
Top