• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 229
  • Last Modified:

Whitelisting Browsers in Domain

We are looking for a way to only allow IE and Chrome for use within our windows 2008 R2 domain. I have setup a software restriction policy via GPO to block other third party browsers from launching, but wanted to see if there was an easy way just to whitelist Chrome and IE and block the other browsers.

Would be opened to third party solutions as well.
0
GR JN
Asked:
GR JN
2 Solutions
 
David Johnson, CD, MVPOwnerCommented:
whitelist by manufacturer google and microsoft.
0
 
arnoldCommented:
What other software do you have? I.e. Central managed anti-virus/security app that has the functionality you want I.e. Symantec SEP, Mcafee ENT and Kaspersky. These have the feature you want that you can allow only the following.

The builtin software restriction require you to define which application are allowed and which are denied.
0
 
btanExec ConsultantCommented:
believe it should be applocker instead of SRP which is the predecessor. that is already quite a good start, since you are only whitelisting the application to execute via hash or publisher or path. But they can be bypassed which is probably the other layer of controls to mitigate that "gap". The hash will be good but it is too restrictive if app are updated. Also portable apps (assuming no hash rule enforcement), it can be run w/o installing and given that user should not be in any way able to assume admin role.

Device control via devicelock or Symantec SEP device and appl control will be good to allow authorised device only - whitelist device or simply reject any possible ext storage device and mobile device storage.

Appl control are available as well by the named product but better not to conflict with OS applocker - in other words chose one to ease the operational administration.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now