Solved

Restrict web usage on windows enterprises

Posted on 2014-02-27
3
179 Views
Last Modified: 2014-03-16
Greetings,
we have windows 7 desktops with a windows server 2008 R2 enterprise.
I want to know is how to establish a policy for a user group to be only able to surf websites within specified domains.

ie.  if I'm business1, I only want business1.com and business1.net and subdomain.business1.com available at a particular desktop.

Thanks
0
Comment
Question by:Evan Cutler
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 39894499
There is nothing within Windows Server natively that let's you manage how users access the internet.  it would require either 3rd party software or higher end router/firewall
0
 
LVL 25

Accepted Solution

by:
Coralon earned 500 total points
ID: 39895294
The easiest "cheap" way to do this is a combinations of policies and DNS settings.  
If you set your DNS to be it's own root server (.) and don't provide any root forwarders and you control the only domains (business1.com, business1.net), then you can prevent them from easily being able to get to other places on the internet.

Add a Group Policy to lockdown the DNS settings to prevent them from going to a public DNS.  Now, this is going to affect your entire domain, and will prevent windows update from  working.  To get around that, you could set up a WSUS server in the domain.  For that one server, you would set a 2nd NIC to be on the internal network, and set the default gateway to go to the public internet.  

You can also:
Block DNS except from specific machines at the external firewall.  Then you can also block all of your outbound traffic at the firewall, except for specific domains & ip addresses, and protocols.  

Another thought on this:
You could use a group policy to set a false proxy server that doesn't exist, and then use the exceptions to bypass this false proxy.

But, the best way is to use a 3rd party software/proxy.  WebSense is a good choice, and I believe Barracuda provides a good one.  If you wanted to go the managed firewall route, NetworkBox is pretty good.

Coralon
0
 
LVL 9

Author Closing Comment

by:Evan Cutler
ID: 39933113
Thank you for the solution.
I'd like for you to have the points because I know your solution will work for some people.  Apparently my backbone did not have the necessities to enable what you suggest.  We are working on it, but the timeline for EE doesn't allow for that.  That being said, if I have further questions, I'll repost.

Thanks again.
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question