locked
Blocking Websites Using group Policy RRS feed

  • Question

  • Hi,

    we are using windows server 2008 domain,i want to block few websites.I am trying to do with group policy

    user configuration->windows settings->internet explorer maintenece->security.

    I am able to block few websites like www.facebook.com. But the problem is user can open www.facebook.in,www.facebook.at . I want to block all top level domains of website,but i can't put all the entries in the list.Please anybody help me to resolve this

    Regards

    Asha


    Friday, March 25, 2011 9:08 AM

Answers

  • The best and most appropriate way to manage internet traffic is with the use of a proxy.  You would configure your outbound Firewall rules to block ALL outbound traffic and only allow the proxy server(s) to get through.  You would then configure the IE clients to use the proxy.  On the proxy, you would configure the appropriate filtering rules for your organization. 

    There are several proxy applications out there, some free and other quite expensive.  It all depends on the features you are looking for.

     


    Visit: anITKB.com, an IT Knowledge Base.
    Friday, March 25, 2011 1:44 PM
  • Best solution would be to enable some sort of web proxy server, such as ISA/Forefront, or content filtering service such as OpenDNS.  However, you might be able to do this also on your firewall or router, depending on what type of appliance you're using.  For example, the Cisco ASA 5510 does support URL Blocking.

    EDIT: You might want to look into Websense or something similar.
    Friday, March 25, 2011 8:11 PM

All replies

  • For me, the best way to block websites is the use of a proxy like ISA Server / TMG Forefront.

    For group policy settings, try to block www.facebook.* URLs.

    For more information, refer to this article:

    http://www.grouppolicy.biz/tag/url/

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Friday, March 25, 2011 10:39 AM
  • Hi,

    Thanks for the response,We have tried to block in that way also but that is not working.

    Regards

    Asha

    Friday, March 25, 2011 10:48 AM
  • Hello,

    Try using 3rd party applications like OpenDNS.

    Friday, March 25, 2011 1:34 PM
  • The best and most appropriate way to manage internet traffic is with the use of a proxy.  You would configure your outbound Firewall rules to block ALL outbound traffic and only allow the proxy server(s) to get through.  You would then configure the IE clients to use the proxy.  On the proxy, you would configure the appropriate filtering rules for your organization. 

    There are several proxy applications out there, some free and other quite expensive.  It all depends on the features you are looking for.

     


    Visit: anITKB.com, an IT Knowledge Base.
    Friday, March 25, 2011 1:44 PM
  • Best solution would be to enable some sort of web proxy server, such as ISA/Forefront, or content filtering service such as OpenDNS.  However, you might be able to do this also on your firewall or router, depending on what type of appliance you're using.  For example, the Cisco ASA 5510 does support URL Blocking.

    EDIT: You might want to look into Websense or something similar.
    Friday, March 25, 2011 8:11 PM
  • Hi, 

    I want to block some websites like Facebook,YouTube for certain time period for all user except admin. can u guide me steps to configure GPO. 

    Thanks

    Tuesday, January 24, 2017 6:35 AM