Lock down websites

Hi Experts,

right I hope this is clear and not too difficult but I will do my best to fully understand this.

so... my boss walked in and said to me 'I want to lock down what websites individuals can access here'

he wants to stop them watching youtube, playing games etc.

how can I do this? I havent done this or even seen it being done.

please ask any questions as I don't know what information I need to provide as I don't even know where this would be set from!

PC's - windows 7 64bit
SBS2011 server
around 50 users
both chrome and IE used (all versions)

look forward to some help!
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
You will need a content filtering application.

How are your users connecting to the internet? Are they going through the SBS2011 or going directly through a proxy or the router?

You might want to look at websense as well.
peggiegregAuthor Commented:
as it currently stands, and this is the way I believe it works. the server manages the DNS side of stuff which goes through my draytek router Vigor 2860
Bryant SchaperCommented:
How big of a network?  You could like at a network appliance like Palo Alto. They integrate with active directory and you can assign users to ad groups that map to policies on the firewall. That way joe blow in accounting can't access Facebook but Sally in marketing can. Plus you get reporting of user activity. You c an do it software based as well or even use something like open DNS and control your search results. I prefer the network firewalls/filter approach however.

I think the same can be done with a Cisco Asa as well.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

David AtkinTechnical DirectorCommented:
You Draytek router can be configured to act as a web content filter if you purchase the subscription


I've never used it personally though.

Another cheap alternative would be to use a DNS Service provider like OpenDNS (Configured as a DNS Forwarder on the SBS).  There are some drawbacks to this method though as the clients could just change their DNS Servers.   As Bryant Schaper said, the most reliable method would be to get an appliance to do it for you.
peggiegregAuthor Commented:
thanks I will look into using the appliance method, we do need to stop specific people from accessing websites but our marketing team and web dev team will need to access all sites, so I like the idea that I can use OU's or something similar to group them. thanks for your help guys
peggiegregAuthor Commented:
Also just to add, I looked at the draytek add on to do this and it doesn't seem all that plus it isn't very configurable (its basic). and my network is for about 50 users so not massive at all.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.