Windows Forum

Ask something
Discussion Locked

group policies

0 helpful
11 replies

by mtrahern

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can I restrict internet access? Web surfing is becoming a problem in certain departments, but these people will still need access to a limited number of sites. (Running a 2000 network) Thanks.

11 replies

by tels

It is possible to identify the most frequently visited sites and redirect the user from the real site by the use of the lmhosts file.

This is a flat file which resolves known Domain names to IP addresses. Each client (the server) has an equivalent (HOSTS in *nix) If the client is configured to look at the lmhosts file before it goes to DNS, it will redirect immediately to the IP specified by you (which can be 127.0.0.1)

This isn't a complete fix, but might put people off. My solution is to get a proxy server with the ability to restrict sites. this will also free up bandwidth.

by tels

Also, you can use policy settings from the Active Directory Users and Computers to lock down access to dangerous/bandwidth heavy apps like Javascript, Flash, downloads etc. - You can relax restrictions on 'Trusted Sites' which you specify. It is possible to lock down sites to the point of minimum access - which should deter users even more.

by tels

Maybe you could add entries to your servers DNS setup to create the same effect as the top suggestion - creating a diversion instead of forwarding the query to an external DNS server

by anne.jan.elsinga

You can install a proxy server. With most proxy software you can limit the sites to which people can go. For example Microsoft Internet Security and Acceleration server can do this for you.

by Ryan Boudreaux140

As stated above, one option is the installation and configuration of a web filter server on your network utilizing a third-party software application. We are currently reviewing two such apps. for our network, Websense and SuperScout Web Filter. Currently we are leaning toward SuperScout, which allows you to define user groups and then create blocking rules that can be applied and based on categories, connection time, time of day, number of hits, bandwidth utilized, or you can establish your own thresholds.

This discussion is closed to new replies.