Windows Forum

Ask something
Discussion Locked

Blocking a site

0 helpful
7 replies

by borg7of9

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a small network, 10 workstations, one win2000 server, one gateway/router/firewall that does my DHCP. I do not know this router well, and do not want to start playing with the config. Is there a way to block only one or 2 web sites, using win2000 server. We have only only small case of mis use and blocking 1 or 2 sites would solve the problem, so I would like to avoid installing a blocking/monitoring hardware or software solution, any help much appreciated. The blocking must be for all workstations)

7 replies

by borg7of9

I dont want to block all internet trafic, only one or 2 sites, I think I may be able to do this usung lmhosts, but would need to know the steps.

by sgt_shultz

ok, but it would be easier thru the router. don't be chicken. have a look? what is the worst that can happen. do you know how to reset router. then you call isp and ask them to help you get back on line..

by sgt_shultz

it does beg the question of how your wkstns get dns doesn't it? think the order you are thinking of is hosts, internet, lmhosts. so try hosts if no joy lmhosts. or did your colony not mention looks for dns more than one place? i supposed one would direct that ip address into a 'about blank' page or something...(how about 'big brother is watching you' page)i think is clunky approach. and too easily circumvented.
you could walk to each workstation and block it in IE if that is your browser. you could look up ie administration stuff at microsoft.com if you didn't want to walk around to each. hmm. maybe you gonna have to anyway with hosts approach. bet it won't last long and you will not like administering that way. do you know how to get into your router? what have you got against setting up proxy server? safer surfing. have you looked to see if there are not easily configurated places to block all users or any users from specified websites in your router? do you think we wonder what os your wkstns are? i am blasting off from your planet borg. have fun.

by razz2

I would use the router myself, but there are two easy ways to this without the router. You could use a host file or Group Policy. I prefer Group Policy, but you did not mention the workstation OS so you may have win98 or the like which will render GP useless.

Option 1 is to create a hosts file with entries such as:

127.0.0.1 badsite.com

Change the ip to an address where you want them to go and put the domain of the bad sites.

Option 2 is using Group Policy:

This requires Win2000 or WinXP for the workstations.

Got to User Config / Windows Settings / Internet Explorer Maintenance / Security. Look on the right hand pane and select the properties of Security Zones and Content. Select the Import the current security zones and privacy settings radio button, and configure your Restricted Sites.

Of course will need to apply the policy to users through their OU and make sure they have READ and APPLY permissions.

Good Luck,

razz

This discussion is closed to new replies.