Group policy to block file downloading

Posted on 2007-04-10
Last Modified: 2012-06-27
In our organization we have a domain system . All the clients are added to the OU in the Active directory. How can I block downloading from Internet using Group policy. I tried so many ways, but none is working. plz give me a solution.
Question by:shahidaeng
  • 2
  • 2
  • 2
  • +1
LVL 15

Expert Comment

ID: 18880861
I think you may have to block the Internet/WWW in its entirety because even the action of viewing a web page is technically a download. Do you use a router or some kind of gateway device?

Expert Comment

ID: 18880891
wouldn't it be better to have a internet gateway to take care of that?
a firewall or a proxy server perhaps?
LVL 48

Accepted Solution

Jay_Jay70 earned 500 total points
ID: 18880959

check this out from our local security guru


Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.


Author Comment

ID: 18881128
I dont want to block browsing. If we try to download a file, by clicking on the download button, that must show, your security settings are not allowed to dwnload.
Only this much I want.

We have ISA already, but I dont want to use ISA for this. I want to block only the downloading using download button.  
plz give me a solution.

Expert Comment

ID: 18881149
but as you see from the link over, you would not hinder any one that downloads file trough anything else but internet explorer.
anyone that realy want's to download something would find a way

Author Comment

ID: 18881161
I already configured that using group policy. But in that when we try to download a file, it will ask for optionas open, save, cancel. When I click save........... that will show the msg your security setting is blocked this.
But if I click on open,............. that will first download and will open. I want to block that also.
LVL 48

Expert Comment

ID: 18887699
Then proxy it...GPO is not a proxy, ISA is

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now