Block Internet Access to various users on one PC

[Gilly2003]

Hi all,

 

I have one PC which any domain user can log in to but I want to block internet use on it for anyone who logs in.

 

We use a sonic wall setup but I am not familiar with its workings, only to know that whoever set it up did so with no knowledge either because the groups on it do not work.

 

Is it best to just create a GPO and drop the users in to an OU with it applied or is anyone proficient enough in sonciwall to point me on how to set this up.

 

I still need to have access to sites locally on the PC and preferably I would like to allow access to at least 2/3 external sites but all other internet browsing blocked.

 

Hope someone can help.

 

Thanks

[rrrrr]

I'm not familiar with SonicWALL as we use a different UTM here,

As a quick fix, could you not just remove proxy settings in GPO for that PC?

If this would affect more than one PC, a quick logon script if %COMPUTERNAME%= then remove proxy settings?

[Oaktech]

Or just add a fake, or localhost address into proxy details for this PC?

[stgoodyeara]

You will need to put a fake proxy, i had something similar and putting no proxy meant that the browsing just found its way via the default gateway and for me users were promoted for login detail in the browser and off they went. What i did in the end (on a smoothwall) was to set a static IP on the workstation, i actually just did a reservation in DHCP then create an authentication my location rule that authenticated that location as a user group that had blocked internet. I just had to make sure that this authentication rule came before any others.

[Gilly2003]

Thanks all, this worked and will help in the short term.

 

Now to get the silly content filtering to work correctly