Windows server 2003 RRS feed

  • Question

  • I need to know if you can restrict the users from accessing the internet browsers.
    Thursday, November 7, 2013 11:24 AM


  • Yes you can - If you create a new group policy object, you can use software restriction policies to deny access to certain applications.

    This guide shows you how to create a new GPO:


    This guide talks you through setting a software restriction:


    If you block IE, Firefox, Chrome etc for your users - they will not be able to access the web.

    Alternatively - you can consider allowing them to open the app, but not to access the net.  To do this, simply create a group policy to set a proxy to the local machine and disallowing the user to change it:

    1. Create a new policy in GPMC by right-clicking your domain and pressing New. Name the policy No Internet.
    2. Right-click No Internet and press Enforced to check it.
    3. Select No Internet in the left-hand pane, select Authenticated Users under Security Filtering and press Remove, and OK to prevent the policy from applying.
    4. Using Group Policy to implement Internet Explorer settings, navigate to User Configuration / Windows Settings / Internet Explorer Maintenance in the No Internet policy.
    2. Right-click Internet Explorer Maintenance and press Preference Mode.
    NOTE: If a policy is already defined, you must press Reset Browser Settings, which will reset any Internet Explorer Maintenance Group Policy, before you press Preference Mode.
    3. Navigate through Connections and double-click Proxy Settings (Preference Mode).
    4. Check Enable proxy Settings, Use the same proxy server for all addresses, and Do not use proxy server for local (intranet) addresses. (The box above this checkbox is where you set exceptions for your internal network)
    5. Type into Address of proxy and 80 into Port.
    6. Press OK.
    7. Close the No Internet group Policy.
    NOTE: To prevent a user from changing their proxy settings, implement Disable changing proxy settings or Disable the Connections page in the No Internet policy.
    To prevent a user from accessing the internet:
    1. Select the No Internet group Policy under your domain and press Add under Security Filtering.
    2. Use the Advanced dialog to locate and select the user, pressing OK.
    3. Press OK.
    4. If the user is logged on, force the policy to update.

    • Marked as answer by Susie Long Monday, November 11, 2013 1:23 AM
    Thursday, November 7, 2013 11:32 AM