Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am running an Active directory and I need to specifically restrict downloads to some users while being able to surf the web... Is there a tool to do this?

share|improve this question
up vote 0 down vote accepted

Setting up a proxy is the ideal solution. Be sure to document what you do and do not allow. If you need a web filtering solution (rather than dealing with your own access lists), there are many commercial products available.

And if you're going to install a proxy, be sure that it's not possible to browse the outside Web without it. Users can be tricky sometimes. :)

share|improve this answer

try untangle. It's open source but requires a separate PC to run. There is also OpenDNS. Before you start blocking you should put in place a company policy and notify your employees accordingly. Once a policy is defined then start blocking as per the policy.

share|improve this answer

Set up a proxy that's smart enough to do it and send all web traffic to it.

One example would be Squid with ntlm_auth and some custom ACLs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.