Improve company productivity with a Business Account.Sign Up

x
?
Solved

How to block students accessing certain websites but allow staff?

Posted on 2007-11-19
12
Medium Priority
?
1,569 Views
Last Modified: 2008-03-01
Hi
We are trying to stop students from abusing lessons by using hotmail. We have blocked the site using our cache server but this stops all staff from accessing it.

Ideally we would like to block the site for students only and allow staff, but if this isnt simple then just blocking access for all between 9am and 3.20 pm would help.

We have Server 2003 and use Active Directory for staff and students. Is there something we could configure in Group Policy? We also use Ranger but this only blocks programs as far as I can see.

Kind regards
0
Comment
Question by:alumwell
12 Comments
 
LVL 2

Expert Comment

by:Haze0830
ID: 20312856
Do your students need access to Internet Explorer for any reason?

If not, you can prevent access to the browser through GPO.

Check out this solution as well for using GPO to configure the Content Advisor to block specific sites.

http://www.experts-exchange.com/Security/Misc/Q_21226658.html
0
 
LVL 2

Expert Comment

by:Haze0830
ID: 20312922
Really, the most surefire way would either be to remove access to IE altogether or to stop traffic at the firewall. I'm not sure what type of firewall you have in place though....

Watchguard firewalls for instance provide an addon to their OS that will do exactly what you're looking for.

Here are some new GPO's available in SP2 for Windows Server 2003 - which would involve installing SP2 first obviously if you already haven't...


0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 

Author Comment

by:alumwell
ID: 20313021
Hi Thanks for replies so far, but students would obviously require Internet Explorer to access education related material, just specific websites would be nice to be blocked for them.

Not really clued up on our ISA server so a simpler option would be nice but willing to get hands dirty if needs be.
0
 
LVL 2

Expert Comment

by:Haze0830
ID: 20313145
ISA Server will do that for you. I'm not very savvy with it but check out this document.

download.microsoft.com/download/e/7/6/e76fdda3-5c2c-4fbb-9c6f-3bcd0ed4b8ef/web_proxyWP.doc
0
 

Author Comment

by:alumwell
ID: 20333350
Anyone have a how to guide?
0
 
LVL 2

Expert Comment

by:Haze0830
ID: 20337814
that link I provided should help you. What version of ISA server are you using?
0
 

Author Comment

by:alumwell
ID: 20338076
Hi Haze0830,

The link was useful but really just let us know ISA's capabilities not specifically how to block sites for specific users.

We have ISA 2004

Kind regards,
0
 
LVL 2

Expert Comment

by:leontas
ID: 20349685
If your staff use different pcs (i.e. not the machines that the students use) you can easily do it through www.opendns.com.

You make an account there (one will suffice for all pcs) and you will use the DNS IP of OpenDNS.
Once logged in, you will go to Domain Blocking option and enter any domains that you want to block.
Apart from hotmail consider also blocking access to facebook, hi5, myspace etc. You have no restriction on the amount of domains you can block.

Whats more, they also offer statistics so after a few days you can check and see what websites are generating more traffic and block them as well if they are irrelevant to your lessons.

The service is completely free!
0
 

Author Comment

by:alumwell
ID: 20448478
Hi Leontas,
Thanks for the link but as its a college we would like something in-house that we can setup ourselves.

There are some staff only PC's but most are shared between staff and students so ideally would prefer to distinguish them by their group name if possible.
0
 

Expert Comment

by:BadgerCS
ID: 20711033
If you have Ranger, then a quick and dirty method could be to use the "Title check" facility, where Ranger monitors the title of any open window for a list of text strings and if matched can forcibly shut it. As long as you're students aren't going to have legit docs which include e.g. "hotmail.com" in their name, then this should do the job. You only need to apply it to students, not the staff.
0
 

Accepted Solution

by:
alumwell earned 0 total points
ID: 20956517
My manager sorted the problem by creating groups on the proxy and stopping access that way, thanks for your help.
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
Among the most obnoxious of Exchange errors is error 1216 – Attached Database Mismatch error of the Jet Database Engine. When faced with this error, users may have to suffer from mailbox inaccessibility and in worst situations, permanent data loss.
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…

579 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question