Re: Need to Lock Down Internet Access



Hi,

There doesn't seem to be an easy way to impliment this exclusively using
Group Policy. Some research indicates this is best done using a firewall
solution, or third party program. However, Windows XP SP2 does provide for such
blocking.

A round-about-way could be to use the content advisor to restrict internet
access to sites in the approved range. Some resource on that can be found here:

--
Q: Which group policies allow control over which sites a user can access? Is
there a way to block all but certain sites?

A:You can do this by setting Approved Sites through Content Advisor by importing
the Content Ratings settings in User Configuration\Internet Explorer
Maintenance\Security and adding a list of approved sites.

[http://www.microsoft.com/technet/community/chats/trans/ie/ie032003.mspx]
---

You mentioned your experience with Group Policy. You may therefore find the
following instructions adaptable to what you wish you accomplish. In this
instance, the goal is enabling the content advisor for a single user. However,
as mentioned above, you should be able to configure this to a specific set of
websites.

http://experts.about.com/q/1062/3198195.htm

(Hint - you may find it easier to go straight to the answer).

---

If you have any more questions or comments, do not hesitate to ask. However, I
would suggest you try the following newsgroup, as it is directly concerned with
group policy. They are significantly better equipted to help you :-) :

http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.win2000.group_policy

General page for Group policy newsgroup links:

http://www.microsoft.com/windows2000/community/newsgroups/management/default.mspx

(Scroll down and select the appropriate forum for your product).

If you have any questions or comments, do not hesitate to ask,

Best regards,

Altrus


"dpmjr" <dpmjr@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E95E2BEB-B444-4CEE-A891-DC7E3A7DDC64@xxxxxxxxxxxxxxxx
: I am in a Windows 2000 domain with AD. All of my client computers are
: running WinXP SP2. I have one machine which is used by a couple users
: (seperate logins). One of these users I'd like to restrict Internet access
: to just 2 sites. Is there an easy way to accomplish this. I have in the
: past used a Group Policy for an OU for our training room to restrict access
: to the internet all together. This is a little different since they will
: need to get to two sites.
:
: Thanks
:
: Dante


.



Relevant Pages

  • RE: Content Advisor
    ... Advisor Settings. ... Scenario I: Deploy the settings by create Group Policy on Domain Controller ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Content Advisor
    ... Advisor Settings. ... Deploy the settings by create Group Policy on Domain Controller ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Content Advisor
    ... set in Group Policy do not apply to client machines. ... I suggest we check the following registry key on both client and server. ... Enable Content Advisor on the client first then apply the group policy. ...
    (microsoft.public.windows.server.sbs)
  • RE: Content Advisor
    ... If I manually enable the content advisor it works fine, ... enable the content advisor through group policy not by manually doing it. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Enable Content Advisor
    ... There seems not to bee a built-in one. ... File (Administrative Template) and use within a GPO. ... > Is there a group policy that enables content advisor every time a user ... I setup restrictions for content advisor using the group ...
    (microsoft.public.windows.group_policy)