how to use group policy to control IE 11 visit one website only?

how to use group policy to control IE 11 visit one website only? for example: only visite www.ibm.com
howruaz9Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dave BaldwinFixer of ProblemsCommented:
If you succeed in limiting your users to www.ibm.com, you will find that not even the IBM home page will load correctly because they get their CSS and JavaScript from "1.www.s81c.com".  To make your restriction usable, you will have to make sure that nothing on that domain is loaded from another domain.
howruaz9Author Commented:
Good comment Dave. But I need a solution.
JohnBusiness Consultant (Owner)Commented:
The conclusive answer in today's world to limit to one single website is to disconnect the internet. Your proposal is not realistic.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

MacleanSystem EngineerCommented:
Only thing I can imagine is not GPO related. You would need to configure your proxy to block all external HTTP/HTTPS access excluding the one site in question, but then that site would not render properly as per Dave's comment.  Many 3rd parties have a piece of the pie on a website, which brings me to Johns conclusion that this is not possible unfortunately, unless perhaps it is your own website, and you know exactly which URL's to whitelist.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
howruaz9Author Commented:
proxy is a  solution. But I prefer group policy solution.
Thanks much Maclean, John and Dave.
MacleanSystem EngineerCommented:
Could block all on proxy but allow site to bypass proxy via GPO. Bit of both that way. Otherwise there is no solution via GPO.
Dave BaldwinFixer of ProblemsCommented:
Have you looked at the one site you want to limit the access to and checked to see if it would work?  If it is a public site, we can check for you.  

Note that if you do this, you will have to disable all addons to IE11 because many of them 'phone home' when you open the browser.  When I opened my homepage on my HP laptop with Fiddler running, I saw that the HP Network Checker add-on 'phoned home' without me doing anything.

I'm assuming that you want this to apply only to IE11.  Many programs 'phone home' to check for updates and of course, Windows does too.  They just don't do it thru IE11.
Ganesamoorthy STech LeadCommented:
compdigit44Commented:
Like other mention your are going to run into problem with just allowing www.ibm.com since IBM's site references many other sites.. Anyway create a proxy.pac file and push the setting for IE to reference the PAC file via GP...


https://www.websense.com/content/support/library/web/v76/pac_file_best_practices/PAC_best_pract.aspx
howruaz9Author Commented:
Thanks much for all your help. Much appreciated!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.