how to restrict selected web sites in Windows 2003 Server Small Business

I have windows 2003 small business edition as my domain controller.
I dont have a web server or an exchange server
how can i restrict web page access to certain sites?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hello CiaranG,

what edition of sbs do you have? premium edition has isa chich can do this easily.
btw, if you don't have a webserver or an exchange server, how did you setup this sbs???
sbs is a webserver, exchange server and DC.
If you didn't install these options you didn't setup this server the right way.

So if you have the STD edition, a pushed host file could do the trick.

CiaranGAuthor Commented:
how can I tell if I have premium edition
If I dont have premium edition how do I restrict web site access

here is some more reading:
If you have the extra ISA cd's, you have sbs premium.

Hello agdickinson,

You can use Group Policy to limit access to web sites to specific web sites.  One option would be to do the following:
Open your Group Policy Management Console and create a new group policy that will be used to for the settings you will make and apply to the OU that will contains your user accounts that you would like to limit.
Edit the Group Policy Object (GPO),  expand the ?User Configuration? container. Now expand the ?Windows Settings? , ?Internet Explorer Maintenance?, ?Connection?.
Right Click on ?Proxy Settings? and then click on Properties.
You now have the Proxy settings window open.  Click the checkbox next to ?Enable proxy settings?
Once you have done this you will be able to type in an address in the text  box next to ?HTTP:?.  Type in and change the port address to 8080 (changing the port address is not actually required).  To allow access to only the web sites you would like people to have access too, type in the exceptions in the area under ?Exceptions? .  Please note that if you want to add more than one, you need to separate the addresses using a semicolon (;).  You need not add the entire address, just the domain name preceded by an asterisks (*) ? (example:  for type in * ? this way you will have access to all Microsoft web sites without having to specify each in turn).  
If you would like to prevent people from changing their proxy settings on their computers (performing the above does not prevent changes locally to the proxy settings) then you need to also add the following to your GPO:
Goto -> User Configuration, Administrative Templates, Windows Components, Internet Explorer.
Enable the following items:
Disable Internet Connection wizard
Disable changing connection settings
Disable changing proxy settings
Disable changing Automatic Configuration settings

This is one of a few options open to you if you do not have Internet Security and Acceleration Server installed. (part of SBS premium)


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CiaranGAuthor Commented:
I have attempted your option a number of times but this option seems to restrict web access totally, is there any other option

At this point I would be willing to purchase a piece of software that would limit web page access totally!

any other suggestion?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.