How to prevent users from accessing unauthorized websites on Server 2000

Posted on 2011-10-20
Last Modified: 2012-05-12
ISA role not installed

tried hosts file, no good there

I've also heard that using the DNS role (actually installed) is a bad idea for preventing website access.

all users have local administrator access on their machines, so, unsure how to push through a policy (group policy role also not installed) that changes something on their terminal and yet, makes it so that they will not have administrative priviledges to change it back...

help please!  
Question by:mgedlaman
    LVL 14

    Accepted Solution

    If what you're trying to do is block people from surfing the web while working, then your best bet is to do it at the firewall.  Even consumer-grade routers usually have a filtering option built in that will allow you to restrict web sites based on the name or IP of the site.
    LVL 57

    Expert Comment

    by:Mike Kline
    Are they part of a domain?  You can do it through group policy as outlined here

    I wish there was an easier way (using group policy) because this is a very common request.



    Author Closing Comment

    Hmmm, that makes sense.  The head IT administrator is using DNS blocking, not sure why he's not using the firewall instead...thank you for your input Sentner :)

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now