asked on

IE lock down group policy.

Hello,

I need to create an IE lock down group policy to block all internet access for some computers but allow exception for specified work related internet websites and also allow the internal websites

Please advise how this can be probably done.

Many thanks.

Nav

ASKER CERTIFIED SOLUTION

Brian B

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

FOX

Download the IE template for IE 11 through 8 and adjust your settings and apply them to a GPO
ref link: https://www.microsoft.com/en-us/download/details.aspx?id=40905

ref link: https://docs.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/administrative-templates-and-ie11

ref link: http://www.alexheer.co.uk/it-blog/configuring-ie11-settings-via-group-policy

Peter Hutchison

You can use IE's proxy settings to set up a dummy proxy server (e.g. 0.0.0.0) or to a custom web page, and exclude any intranet web servers in the Bypass Proxy Server settings and lock it down with GPOs or registry settings to stop users from changing the settings.

See https://www.makeuseof.com/tag/block-windows-internet-explorer-accessing-internet/

Brian B

FOX, those links refer to how to configure IE itself, not block access.

Peter, the questions says they want to allow specific web sites. The article you linked refers to how to block access entirely.

nav2567, what firewall do you have and are you allowed to spend money to solve the problem. Also, how secure do you need this solution to be (i.e. impossible to break or company accepts that clever users might find a way around)?

nav2567

ASKER

We use Cisco ASA.

Can content advisor do the trick? Any one knows how to configure it?

SOLUTION

Brian B

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial