Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 197
  • Last Modified:

Restrict web usage on windows enterprises

Greetings,
we have windows 7 desktops with a windows server 2008 R2 enterprise.
I want to know is how to establish a policy for a user group to be only able to surf websites within specified domains.

ie.  if I'm business1, I only want business1.com and business1.net and subdomain.business1.com available at a particular desktop.

Thanks
0
Evan Cutler
Asked:
Evan Cutler
1 Solution
 
Cris HannaCommented:
There is nothing within Windows Server natively that let's you manage how users access the internet.  it would require either 3rd party software or higher end router/firewall
0
 
CoralonCommented:
The easiest "cheap" way to do this is a combinations of policies and DNS settings.  
If you set your DNS to be it's own root server (.) and don't provide any root forwarders and you control the only domains (business1.com, business1.net), then you can prevent them from easily being able to get to other places on the internet.

Add a Group Policy to lockdown the DNS settings to prevent them from going to a public DNS.  Now, this is going to affect your entire domain, and will prevent windows update from  working.  To get around that, you could set up a WSUS server in the domain.  For that one server, you would set a 2nd NIC to be on the internal network, and set the default gateway to go to the public internet.  

You can also:
Block DNS except from specific machines at the external firewall.  Then you can also block all of your outbound traffic at the firewall, except for specific domains & ip addresses, and protocols.  

Another thought on this:
You could use a group policy to set a false proxy server that doesn't exist, and then use the exceptions to bypass this false proxy.

But, the best way is to use a 3rd party software/proxy.  WebSense is a good choice, and I believe Barracuda provides a good one.  If you wanted to go the managed firewall route, NetworkBox is pretty good.

Coralon
0
 
Evan CutlerVolunteer Chief Information OfficerAuthor Commented:
Thank you for the solution.
I'd like for you to have the points because I know your solution will work for some people.  Apparently my backbone did not have the necessities to enable what you suggest.  We are working on it, but the timeline for EE doesn't allow for that.  That being said, if I have further questions, I'll repost.

Thanks again.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now