how to use group policy to control IE 11 visit one website only?

howruaz9
howruaz9 used Ask the Experts™
on
how to use group policy to control IE 11 visit one website only? for example: only visite www.ibm.com
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Dave BaldwinFixer of Problems
Most Valuable Expert 2014
Commented:
If you succeed in limiting your users to www.ibm.com, you will find that not even the IBM home page will load correctly because they get their CSS and JavaScript from "1.www.s81c.com".  To make your restriction usable, you will have to make sure that nothing on that domain is loaded from another domain.

Author

Commented:
Good comment Dave. But I need a solution.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018
Commented:
The conclusive answer in today's world to limit to one single website is to disconnect the internet. Your proposal is not realistic.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

System Engineer
Commented:
Only thing I can imagine is not GPO related. You would need to configure your proxy to block all external HTTP/HTTPS access excluding the one site in question, but then that site would not render properly as per Dave's comment.  Many 3rd parties have a piece of the pie on a website, which brings me to Johns conclusion that this is not possible unfortunately, unless perhaps it is your own website, and you know exactly which URL's to whitelist.

Author

Commented:
proxy is a  solution. But I prefer group policy solution.
Thanks much Maclean, John and Dave.
MacleanSystem Engineer

Commented:
Could block all on proxy but allow site to bypass proxy via GPO. Bit of both that way. Otherwise there is no solution via GPO.
Dave BaldwinFixer of Problems
Most Valuable Expert 2014

Commented:
Have you looked at the one site you want to limit the access to and checked to see if it would work?  If it is a public site, we can check for you.  

Note that if you do this, you will have to disable all addons to IE11 because many of them 'phone home' when you open the browser.  When I opened my homepage on my HP laptop with Fiddler running, I saw that the HP Network Checker add-on 'phoned home' without me doing anything.

I'm assuming that you want this to apply only to IE11.  Many programs 'phone home' to check for updates and of course, Windows does too.  They just don't do it thru IE11.
Like other mention your are going to run into problem with just allowing www.ibm.com since IBM's site references many other sites.. Anyway create a proxy.pac file and push the setting for IE to reference the PAC file via GP...


https://www.websense.com/content/support/library/web/v76/pac_file_best_practices/PAC_best_pract.aspx

Author

Commented:
Thanks much for all your help. Much appreciated!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial