Solved

Whats the best way to block access to specific sites?

Posted on 2010-08-25
1
334 Views
Last Modified: 2016-09-30
I work in an environment where we have public access to our information.  This information can be viewed and researched any time for free.  However paper and digital copies of the information to be taken away must be paid for.  Recently the honor system seems to have fallen down as some researchers have been emailing themselves gigabytes of data from our research computers.

Time to restrict access.

Points to note:  I don't control the DNS; the OU that these computers reside in is the ONLY one that should be restricted; there are legitimate reasons to be accessing the internet from our research computers, so we just want to block access to web mail; the solution needs to work for both IE and Firefox, on a mixture of Vista and Win 7 computers.

So far in my research, the hosts file seems to be the 'best' solution, but it's clunky, inflexible and wont accept wild cards.
0
Comment
Question by:Williams Co IT Dept
1 Comment
 

Accepted Solution

by:
Williams Co IT Dept earned 0 total points
ID: 33533528
OK IPSec seems to have resolved the issue!!

A Group Policy Object able to be applied to a single OU, using existing infrastructure, blocking all secure connections on port 443.  This will block some possibly legitimate uses of the internet on those machines, but they will be few and there are other options for the public if they need that.

GPO
Computer Configuration>
Policies>
Windows Settings>
Security Settings>
IP Security Policies>
Created a new IP Security Policy, followed Wizard and added rules for LAN connections that connect through TCP and UDP to port 443.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This story has been written with permission from the scammed victim, a valued client of mine – identity protected by request.
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now