+ Post New Thread
Results 1 to 4 of 4
Windows Thread, Restrict internet access but allow certain sites - GPO in Technical; is it possible to allow internet access to certain websites via GPO???? Our LEA policy says when a full internet ...
  1. #1
    thegrassisgreener's Avatar
    Join Date
    Jul 2007
    Posts
    177
    Thank Post
    3
    Thanked 2 Times in 1 Post
    Rep Power
    0

    Restrict internet access but allow certain sites - GPO

    is it possible to allow internet access to certain websites via GPO????

    Our LEA policy says when a full internet connection is available students must be supervised.

    We want a policy where by when there are not supervised (for example dinnertime) they can only access sites which are selected?

    cheers

  2. #2
    Joedetic's Avatar
    Join Date
    Jan 2006
    Location
    Walsall
    Posts
    1,316
    Thank Post
    6
    Thanked 13 Times in 13 Posts
    Rep Power
    22

    Re: Restrict internet access but allow certain sites - GPO

    If you have something like MS ISA server you can specify usergroups in the AD for which you want a rule to apply to. You can also specify time frames and particular groups of computers etc.

    So what you'd do is setup a rule to block all sites except the ones you want them to use, and have it to come on at a the times you want it to apply. You would stick that above the rule for your normal allow internet rule i /think/ so it takes a higher priority. It's been a couple of years since i played with ISA so details might be slightly wrong, but it can do it.

  3. #3

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,070
    Thank Post
    210
    Thanked 430 Times in 310 Posts
    Rep Power
    144

    Re: Restrict internet access but allow certain sites - GPO

    If you don't normally use a proxy server, you can do this by setting the proxy server on the workstations to a non-existant server (so they get nothing when the try and access pages) then put in the selected sites under the 'do not use proxy server for these addresses' section, this will allow access to them.

    This is what we do for for students who are banned from the internet here, they get access to the VLE, student intranet and school website only. It's not the best solution, but easy to do using GPO, and it works.

    Mike.

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,265
    Thank Post
    242
    Thanked 1,575 Times in 1,254 Posts
    Rep Power
    341

    Re: Restrict internet access but allow certain sites - GPO

    Alternatively you could use the Windows Hosts file and block the more common websites you don't want users to visit during lunchtime.

    You could enable/disable the Hosts file using a logon and logoff script:

    Logon
    cd C:\WINDOWS\system32\drivers\etc && ren hosts.disable hosts

    Logoff
    cd C:\WINDOWS\system32\drivers\etc && ren hosts hosts.disable

    Problem is, there's no method to automate this time wise and as far as I'm aware, wildcards like *.com do not work with a Hosts file.

SHARE:
+ Post New Thread

Similar Threads

  1. Blocking Internet Access
    By jcollings in forum How do you do....it?
    Replies: 29
    Last Post: 24th January 2008, 09:24 AM
  2. disabling Internet Access help!
    By Gardinho in forum Windows
    Replies: 3
    Last Post: 5th July 2007, 02:17 PM
  3. Sharepoint: Admin can't access sites!
    By dagza in forum Virtual Learning Platforms
    Replies: 2
    Last Post: 22nd June 2007, 01:24 PM
  4. Restrict Access to OWA based on TIME
    By ICTNUT in forum How do you do....it?
    Replies: 4
    Last Post: 3rd June 2007, 06:37 PM
  5. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •