Per User/Computer Domain Based Content Filtering

Posted on 2012-08-22
Last Modified: 2012-08-31
We currently have a company on Server 2008 R2 domain. They have requested to have 5-10 AD users to only have access to 5 websites in total. These 5-10 users have assigned computers, so if this can be accomplished easier through individual computer than individual AD user we can do that. The rest of the AD users need to have access to all websites. We use Open DNS as our content filtering now. How do we set this up to only apply to certain users, if all users have to point to the same primary DNS of the domain server?
Question by:considerscs
    LVL 36

    Accepted Solution

    you would need a "device" to do the content filtering
    LVL 41

    Assisted Solution

    You can do it with Open DNS Enterprise Insights, according to their web site.

    Granular control based on your Active Directory computers and groups.

    Easily define security policies and access to the Internet based on the specific needs of the users within your organization via any user or device group in Active Directory. Comply with regulations and apply the right protection and access with precision.

    You could also install filtering software on those specific workstations, or setup a squid proxy server on your network to do filtering. Your router or firewall could filter which Internet IP addresses those workstations can access. I am also thinking that you can setup proxy settings on the workstations via GPO or point them to a proxy.pac file where you put in a bogus proxy server, and configure to bypass the proxy for internal traffic, your legitimate websites, and legitimate update sites such as *, *, and your AV vendor, etc.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now