Sign in
 
HomeWindows Server “8” Beta20082003LibraryForums
Windows Server TechCenter > Windows Server Forums > Group Policy > make the user to use only specific websites and outlook.

Answered make the user to use only specific websites and outlook.

    •  
      Wednesday, July 07, 2010 6:11 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      hello,

      i want to know how can i make users uses only a specific websites and outlook only when they use the internet.

      i have windows server 2003 as a domain and an isa server as a firewall, eset antivirus..

       

    Answers

    • Wednesday, July 07, 2010 6:24 AM
       
       Answered
      Sign In to Vote
      0
      Sign In to Vote
      Howdie!
       
      On 07.07.2010 08:11, _Moath_ wrote:
      > i want to know how can i make users uses only a specific websites and
      > outlook only when they use the internet.
      >
      > i have windows server 2003 as a domain and an isa server as a firewall,
      > eset antivirus..
       
      Well, since you have an ISA Server already in place, why not create the
      a firewall ruleset that matches your wishes? That's probably the best
      approach.
       
      Cheers,
      Florian
       
      Microsoft MVP - Group Policy (http://www.frickelsoft.net/blog)
      • Proposed As Answer by pbbergsMVP Wednesday, July 07, 2010 12:32 PM
      • Marked As Answer by Miles LiModerator Friday, August 06, 2010 7:05 AM
      •  
       

    All Replies

    • Wednesday, July 07, 2010 6:24 AM
       
       Answered
      Sign In to Vote
      0
      Sign In to Vote
      Howdie!
       
      On 07.07.2010 08:11, _Moath_ wrote:
      > i want to know how can i make users uses only a specific websites and
      > outlook only when they use the internet.
      >
      > i have windows server 2003 as a domain and an isa server as a firewall,
      > eset antivirus..
       
      Well, since you have an ISA Server already in place, why not create the
      a firewall ruleset that matches your wishes? That's probably the best
      approach.
       
      Cheers,
      Florian
       
      Microsoft MVP - Group Policy (http://www.frickelsoft.net/blog)
      • Proposed As Answer by pbbergsMVP Wednesday, July 07, 2010 12:32 PM
      • Marked As Answer by Miles LiModerator Friday, August 06, 2010 7:05 AM
      •  
       
    • Wednesday, July 07, 2010 1:14 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      ok i know that there is other devices that do this something like astaro, anyone knows what kind of device i can use.

      also the ISA is a software not a hardware.

       
    • Wednesday, July 07, 2010 1:17 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      Hi Moath,

      why you like to use an additional device since the MS ISA server can do the trick?

      Cheers

      Armin Simon
       
    • Wednesday, July 07, 2010 11:17 PM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      You can control what URL's the users can visit by configuring IE with Group Policy however... this is not exactly the best way and blocking the sites via ISA would defenitly be the prefered method.

      Under Windows Settings > Internet Explorer Maintainence > Security > Security Zones and Content Raitings... Select "Content Raitings" and then click Modify Settings button... Click on the "Approved Sites" tab and add all the approved and blocker web sites to the URL as needed... This will also prompt you for a password to be assiged to the content tab so that users cannot change this setting... Its a bit clunky but it should do what you want...

      As for just running Outlook... you can use AppLocker on Windows 7 to create a white list of allowed programs to run that could allow you to lock a computer down only to run Outlook...

      Hope it helps

      Alan Burchill (MVP)
      http://www.grouppolicy.biz
       
    • Saturday, July 17, 2010 10:51 AM
       
       
      Sign In to Vote
      0
      Sign In to Vote

      ok now i got to MS ISA server 2004 and i started firewall policy.

      now i stopped these protocols:

      MMS and MMS server.

      PNM and PNM server.

      RTSP and RTSP server.

      now they cant login to for example msmsnger anymore but still they can go to websites such as facebook,... etc.

      so what is the protocol(s) i should list in this deny policy.

      thank you anyway.

       
    • Tuesday, July 27, 2010 6:51 AM
      Moderator
       
       
      Sign In to Vote
      0
      Sign In to Vote

      Hi,

       

      Internet web page access are based on HTTP. You cannot simply deny HTTP which will deny all internet web page access. Please refer to the following document to deny specific web site to prevent users from accessing unauthorized web sites.

       

      Creating URL and Domain Deny Lists using ISA Server 2004

      http://www.isaserver.org/articles/2004firewallblocklist.html

       

      How To Prevent Users from Accessing Unauthorized Web Sites in ISA Server

      http://support.microsoft.com/kb/300492/en-us