it_gsr
asked on
How to Block Internet Access with GPO in Server 2003
I have a windows 2003 domain with AD integrated DNS.
I need to block access to internet to some domain users regardless of the PC that they log onto.
I need to allow them access to at least three specific websites however.
I do not want to deploy a proxy server or make use of a firewall in this solution.
I am open to GPO and or a any other 3rd party tool.
Question
------------
1, How can I configure GPO to effectively implement my requirement, step by step?
2, Is it possible to use GPO to schedule when Internet access may be available to blocked users, like after work hours?
3, Is there any tool that can achieve this requirement?
I need to block access to internet to some domain users regardless of the PC that they log onto.
I need to allow them access to at least three specific websites however.
I do not want to deploy a proxy server or make use of a firewall in this solution.
I am open to GPO and or a any other 3rd party tool.
Question
------------
1, How can I configure GPO to effectively implement my requirement, step by step?
2, Is it possible to use GPO to schedule when Internet access may be available to blocked users, like after work hours?
3, Is there any tool that can achieve this requirement?
some what u can do but u cant control complete... unles u are using ISA /FTMG/ any kind of utm / proxy server
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi hirenvmajithiya
The article referenced seem to be my best bet with GPO. In fact, I have applied this in the past and realized that it does not work for users.
If I understand, the problem is because of the fact that the DC on which I am applying the GPO is running a different version of ie than the target computers.
I have a mix of PCs running ie 7, 8 and 9 (windows 7) but my DCs are Server 2003.
Do I have to use Server 2008 R2 SP1 for example, with GPP?
Does it mean that for my mixed ie envirnonment I cannot use GPO to target all computers?
The article referenced seem to be my best bet with GPO. In fact, I have applied this in the past and realized that it does not work for users.
If I understand, the problem is because of the fact that the DC on which I am applying the GPO is running a different version of ie than the target computers.
I have a mix of PCs running ie 7, 8 and 9 (windows 7) but my DCs are Server 2003.
Do I have to use Server 2008 R2 SP1 for example, with GPP?
Does it mean that for my mixed ie envirnonment I cannot use GPO to target all computers?
ASKER
Follow questions was not answered
http://www.petri.co.il/block_web_browsing_with_ipsec.htm