Restricting Windows 10 pc to one website

[sarahstacey]

Hi,

 

I need to lock a Windows 10 pc to one website. I have successfully done this with a Windows 7 pc using content advisor.

This is no longer available in Windows 10, I've read that it can be enabled in group policy but the content page option is not there.

 

Can anyone help with this? Many thanks

[NB9457]

This may be of some use:

 

https://docs.microsoft.com/en-us/windows/configuration/set-up-a-kiosk-for-windows-10-for-desktop-editions

[LeMarchand]

I think you can do this with a custom proxy.pac issued to the relevant machine/s (or users).

[ColinP]

edit the hosts file to something like this

 

192.168.0.1 http://www.websiteiwanttoallow.co.uk

 

10.0.0.1 .com

 

10.0.0.1 .co.uk

 

10.0.0.1 .org

[DJ-1701]

edit the hosts file to something like this

 

192.168.0.1 http://www.websiteiwanttoallow.co.uk

 

10.0.0.1 .com

 

10.0.0.1 .co.uk

 

10.0.0.1 .org

 

You could use the host file to disable access to a website, you can't use it to restrict to all other but one website (not unless you want a really big host file as it would need all known websites in it).

[ColinP]

using .com works like a wild card so blocks every domain using .com

[DJ-1701]

using .com works like a wild card so blocks every domain using .com

 

Doesn't here, able to access Amazon.com Twitter.com StarTrek.com and security.stackexchange.com fine, no issue.

[ColinP]

you right, that trick dosent seem to work any more , even if i add 127.0.0.0 bing.com it still gets through ...

[sarahstacey]

Sorry for the late reply. My emails from edugeek were going to spam.

 

Thank you for the help, I'm still battling with this, I'm going to look at parental controls as a possible answer.

[KevinB]

One possible method:

 

Assume the website you want to only allow access to is www.something.com which has IP address 192.168.1.1

Set up DNS on the workstation to point to 127.0.0.1 so that DNS lookups will fail except for those specified in the hosts file

Create a GP for just this station with no proxy set up

Edit your hosts file to contain all of the hostname lookups you want to allow the station to do, e.g.:

 

10.1.1.1 dc01.yourdomain.whatever

10.1.1.2 print.yourdomain.whatever

10.1.1.3 storage01.yourdomain.whatever

...

include addresses for all local resources you want the workstation to access

...

192.168.1.1 www.something.com

Edited June 21, 2017 by KevinB

[Sheridan]

Can this not be done with your web filter? Fixed IP on the PC and a 'Allow Only these Sites' type of rule on the filter? We've done that before with some old kiosk style xp PCs