locked
restricting win7-IE users RRS feed

  • Question

  • I am running Win 2012 AD with windows 7 users and no proxy in environment. I would like to restrict some win7 users to browse only 2 websites and disable all other websites ..Is this can be achieved from GPOs ? or is there any other quick way of doing it please ?
    Tuesday, September 13, 2016 5:23 PM

Answers

  • Hi Bundoo,

    yes you can do this with Group Policy. Basically you need to configure the list of restricted sites in a GPO setting.  You can configure this list based on computers or based on users, depending on your needs. This is the setting:

    Policies (if Vista or Win7)  > Administrative Settings > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List

    There you can configure all your sites, not only the restricted sites. So when you add a site you need to specify the site type:

    1 for Intranet zone
    2 for Trusted Sites zone
    3 for Internet zone
    4 for Restricted Sites zone

    So in your situation, enter each site with the value 4.

    Also we could lock down the security tab so they dont have access to that at all.

    User config - Admin Templates - Windows Components - Internet Explorer - Internet Control Panel

    Disable the Security Page.

    Hope it will be helpful to you


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 14, 2016 2:22 AM

All replies

  • Hi Bundoo,

    yes you can do this with Group Policy. Basically you need to configure the list of restricted sites in a GPO setting.  You can configure this list based on computers or based on users, depending on your needs. This is the setting:

    Policies (if Vista or Win7)  > Administrative Settings > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Site to Zone Assignment List

    There you can configure all your sites, not only the restricted sites. So when you add a site you need to specify the site type:

    1 for Intranet zone
    2 for Trusted Sites zone
    3 for Internet zone
    4 for Restricted Sites zone

    So in your situation, enter each site with the value 4.

    Also we could lock down the security tab so they dont have access to that at all.

    User config - Admin Templates - Windows Components - Internet Explorer - Internet Control Panel

    Disable the Security Page.

    Hope it will be helpful to you


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, September 14, 2016 2:22 AM
  • Hi Bundoo,

    Haven't received your message a few days, was your issue resolved? Because the case may be closed few days later.
    If you feel the suggestion could be helpful to you, please "mark it as answer" to help other community members who have same questions and find the helpful reply quickly.
    If no, please feel free to post back and tell us the current situation in order to provide further help.
    Best regards,
    Carl Fan


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, September 20, 2016 9:14 AM