Solved

Block Internet Browsing but allow email

Posted on 2011-09-21
7
1,461 Views
Last Modified: 2012-05-12
Hi. I need to block web browsing for some users, but allow Outlook to work. It is a small business environment in a Windows Server 2003 based Domain. I am also using a Netgear FVL328 firewall. If I put in an Internet Explorer bogus Proxy setting, images do not display properly in Outlook messages but Send/Receive is ok.

If this is something we have to live with, that may be ok but I wanted to see if anyone has a solution for this. Thanks
0
Comment
Question by:cs2computers
7 Comments
 
LVL 16

Accepted Solution

by:
uescomp earned 125 total points
ID: 36576051
You could just remove all the links to internet explorer and hide the folder containing the iexplore.exe file.  You could try just locking out IE through group policy.
0
 

Assisted Solution

by:zen31
zen31 earned 125 total points
ID: 36576304
Blocking user profile for permitting IE is the best way to prevent web browsing. Secondly block user rights to install any thing on desktop terminals via GP, so that Firefox or any 3rd party browsers cannot be installed. in his manner you are restricting user to use his permitted apps and outlook

Hp it clarifies...
0
 
LVL 1

Author Comment

by:cs2computers
ID: 36576354
Thanks. If I go that route, I'd need to make sure the users can't launch IE via a link or image within an email. I wasn't even thinking in terms of disabling the entire browser. Seems like it could work.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 

Expert Comment

by:zen31
ID: 36576391
You can block IEXPLORE.exe inn that case. so even if a link is clicked the app will be blocked for user profile...
0
 
LVL 8

Assisted Solution

by:lancecurwensville
lancecurwensville earned 125 total points
ID: 36576619
Depending upon how your network is setup (policy wise at the local level) and the tech abilities of your users, if they have an inkling and are local admins, they can install chrome, firefox, opera, etc. to bypass this method.  You may be just as well off to use OpenDns for your DNS (sign up for free account) and pretty much block all categories listed.  They may have Internet access at that point, but are unable to actually browse anywhere due to the restrictions, however, images contained within the email would still flow (providing they are coming from a legitimate source).
0
 

Assisted Solution

by:trueluck3
trueluck3 earned 125 total points
ID: 36579741
I agree with the others, in that Group Policy blocking of iexplore.exe is the best way to go.  Your users should never be configured as local admins to their station, and therefore should not be able to install anything to circumvent the policy.
0
 
LVL 1

Author Comment

by:cs2computers
ID: 36580346
Thanks for all the comments. To start, I will setup a Local Policy to disable iexplore.exe and (possibly) the right to install applications. This seems like the best way to disable web browsing but allow email content to display properly.

It's only a 10 person shop so if someone wants to go above and beyond to install another browser via a flash drive, they can do so at their own risk.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now