Solved

I need to restrict internet browsing completely without disabling networking, or blocking port 80

Posted on 2007-11-28
8
3,562 Views
Last Modified: 2013-12-04
I currently have 2 computers which are used for ambulance dispatch operations, which are locked down using the Microsoft Shared Computer Toolkit. In the "User Restrictions" options, I have the choice of preventing Internet Explorer from connecting to the network.

Unfortunately, when I set that option, it disables connectivity for our dispatch vehicle tracking software. I am assuming that is because our software requires internet explorer, and/or connects through port 80. (Tech support for our dispatch software told us that IE is required for the program to run).

What I need to do is prevent internet website browsing without completely restricting http connections. Prevention of Internet Explorer windows from opening would be ideal.
0
Comment
Question by:The_Computer_Guy
8 Comments
 
LVL 1

Accepted Solution

by:
jcsrepair earned 100 total points
ID: 20370574
What about going into the control panel and removing internet explorer from windows altogether?  And see if you can still access your tracking program.
0
 
LVL 7

Author Comment

by:The_Computer_Guy
ID: 20370589
Unfortunately I still need to have the browser installed for the software to work properly, I tried that as well, but forgot to mention.
0
 
LVL 4

Assisted Solution

by:gamm
gamm earned 100 total points
ID: 20370611
On your firewall block ALL sites and then only allow certain sites through (such as for the program to run).
0
 
LVL 4

Expert Comment

by:gamm
ID: 20370613
You should be able to assign this firewall rule to certain users or computers.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 2

Expert Comment

by:h11
ID: 20374607
you can use local computer policy to block the pcs from all web sites except for the ones you want it to go to

goto start, run type mmc, file add and remove snap ins, add, choose group policy editor, add finish, close and ok . now expand the users configuration, windows settings, internet explorer maintenence, connections on the right click on proxy settings and enable it in the address of proxy enter block. if you want some sights for work purposes enter them inside the exception list. save it and test it. This should block all internet access except for the one you want.
0
 
LVL 6

Assisted Solution

by:ctharp
ctharp earned 100 total points
ID: 20376058
You can configure the content adivsor by creating a noaccess.rat file described in the below KB. If the user goes to a site that is not on the allowed content list, he\she will be prompted for a password for every page. I have tested this on IE 6 but not 7
http://support.microsoft.com/kb/267930
0
 
LVL 32

Assisted Solution

by:r-k
r-k earned 100 total points
ID: 20379196
Use the free IE URL Lock:

 https://www.moonlightdesign.org/urllock/Main_Page

I believe by default it blocks all web surfing, just by installing it. Later you can allow specific sites, if needed.
0
 
LVL 2

Assisted Solution

by:h11
h11 earned 100 total points
ID: 20380715
Look at changeing from shared computers to steady state this is the new microsoft program that has replaced shared computers. on page 23 and 24 of the users guide it explains on how to block the users from the internet.Web sites Allowed

If you select the Prevent Internet access (except Web sites below) option
under Internet Explorer Restrictions, you can type the address of the Web
sites available to the user profile in the Web sites Allowed check box. To enter
multiple web addresses, separate each web address with a semicolon. For more
information about parental controls and advanced Internet filtering, see
Windows Live™ OneCare Family Safety at:
http://go.microsoft.com/fwlink/?LinkId=83433.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now