Solved

Block Internet Browsing but allow email

Posted on 2011-09-21
7
1,535 Views
Last Modified: 2012-05-12
Hi. I need to block web browsing for some users, but allow Outlook to work. It is a small business environment in a Windows Server 2003 based Domain. I am also using a Netgear FVL328 firewall. If I put in an Internet Explorer bogus Proxy setting, images do not display properly in Outlook messages but Send/Receive is ok.

If this is something we have to live with, that may be ok but I wanted to see if anyone has a solution for this. Thanks
0
Comment
Question by:cs2computers
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 16

Accepted Solution

by:
uescomp earned 125 total points
ID: 36576051
You could just remove all the links to internet explorer and hide the folder containing the iexplore.exe file.  You could try just locking out IE through group policy.
0
 

Assisted Solution

by:zen31
zen31 earned 125 total points
ID: 36576304
Blocking user profile for permitting IE is the best way to prevent web browsing. Secondly block user rights to install any thing on desktop terminals via GP, so that Firefox or any 3rd party browsers cannot be installed. in his manner you are restricting user to use his permitted apps and outlook

Hp it clarifies...
0
 
LVL 1

Author Comment

by:cs2computers
ID: 36576354
Thanks. If I go that route, I'd need to make sure the users can't launch IE via a link or image within an email. I wasn't even thinking in terms of disabling the entire browser. Seems like it could work.
0
Salesforce Has Never Been Easier

Improve and reinforce salesforce training & adoption using WalkMe's digital adoption platform. Start saving on costly employee training by creating fast intuitive Walk-Thrus for Salesforce. Claim your Free Account Now

 

Expert Comment

by:zen31
ID: 36576391
You can block IEXPLORE.exe inn that case. so even if a link is clicked the app will be blocked for user profile...
0
 
LVL 8

Assisted Solution

by:lancecurwensville
lancecurwensville earned 125 total points
ID: 36576619
Depending upon how your network is setup (policy wise at the local level) and the tech abilities of your users, if they have an inkling and are local admins, they can install chrome, firefox, opera, etc. to bypass this method.  You may be just as well off to use OpenDns for your DNS (sign up for free account) and pretty much block all categories listed.  They may have Internet access at that point, but are unable to actually browse anywhere due to the restrictions, however, images contained within the email would still flow (providing they are coming from a legitimate source).
0
 

Assisted Solution

by:trueluck3
trueluck3 earned 125 total points
ID: 36579741
I agree with the others, in that Group Policy blocking of iexplore.exe is the best way to go.  Your users should never be configured as local admins to their station, and therefore should not be able to install anything to circumvent the policy.
0
 
LVL 1

Author Comment

by:cs2computers
ID: 36580346
Thanks for all the comments. To start, I will setup a Local Policy to disable iexplore.exe and (possibly) the right to install applications. This seems like the best way to disable web browsing but allow email content to display properly.

It's only a 10 person shop so if someone wants to go above and beyond to install another browser via a flash drive, they can do so at their own risk.
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
If you don't know how to downgrade, my instructions below should be helpful.
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question