Limit access to the internet on an individual basis

Posted on 2005-05-03
Last Modified: 2010-04-18
I work in a small company, about 200 users or so.  Internet abuse is starting to become an issue and HR has asked us to do something about it.  They want us to grant/deny Internet access rights based on need.  What is the easiest way to do this in a Windows Server 2003/Windows XP environment?

Thanks in advance,

Question by:iptrader
    LVL 15

    Accepted Solution

    Hi iptrader,
    Probably the simplest way to do this would be to implement an MS ISA proxy server - see

    You would configure all your users to use the ISA server machine as a web proxy.  You can then configure exactly what your users have access to on the ISA server.
    A common way of implementing this would be to set up groups that define what your users are permitted access to.

    Other proxy servers are available, such as

    Does that help?
    LVL 9

    Expert Comment

    You can also do that with Group policies that either allow or deny IE use for a group of users
    LVL 18

    Expert Comment

    You can block Internet Explorer with group policy, but this does nothing to control Internet just controls IE. A user can still run firefox or another browser and go anywhere on the web they want and you can even run firefox from a usb drive :)  

    For some that may be enough, but if you are looking for a complete Internet control solution then a proxy or a firewall is what you are going to need.
    LVL 16

    Expert Comment

    Also take a look at SpectorCNE Software
    LVL 14

    Expert Comment

    can I just make another point everyone seems to have forgotten :)  IE blocking won't just block them from using it for the internet, it'll stop internal web browsing as well.  
    If you want more information on ISA, there's a wealth of information at and as scampgb suggested it'll do everything you want plus a bit more (it's actually turning into a pretty decent piece of firewall software as well as the proxy stuff it started out as).
    You can get as granular as allowing specific people certain amounts of bandwidth during certain times, restricting site access, port restrictions, logging of traffic, etc.. and you can base everything on your existing domain accounts and groups. It's not overly cheap though (cheap-er for govt and academic institutions), so with only 200 users another less expensive option may fulfil your requirements.

    LVL 14

    Expert Comment

    Hi iptrader - can you please provide some feedback to the experts on this question?  Do you want some clarification on any of the suggestions?

    If this question is resolved and you don't know how to close it, the options are here:


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    Learn about cloud computing and its benefits for small business owners.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video discusses moving either the default database or any database to a new volume.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now