1

In the company I'm in, they want to block a specific user to access some websites.

They have to login in the computer so my idea was to block using group policy management, but I dont find that anywhere. Other users can access those websites.

I have been searching for something that can help me, but I dont find anything. I usually don't work with windows server (and others), so I just know the basics.

  • Internal websites? Or internet-websites? If internal (and on IIS or something), you can easily achieve this by using <authorization> <allow users="?"/> <deny users="blockeduser"/> </authorization> in your web.config, for example. For external (internet-)websites you should probably use a proxy server. – Lenniey May 16 at 16:26
  • it's to block internet websites, like facebook and such – Gabriel Valente May 16 at 16:29
  • You should aim to use authenticated proxy solution for your users, most (or everything) you set via GPO can be bypassed. – Lenniey May 16 at 16:32
  • and how authenticated proxy works? – Gabriel Valente May 16 at 16:39
  • 2
    That's way out of scope here, I'm afraid. What you could also do (very quick and very "dirty") is changing th users' host files to 127.0.0.1 or anything for the targeted sites... – Lenniey May 16 at 17:09
0

Not ideal, but as temporary bodge you could create a .PAC file, host it on a webserver and create a GPO setting applied only to this one user?

GPO

User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer XX > Connections > LAN Settings > Use Automatic Configuration Script: http://yourwebserver/proxy/BlockSteve.pac

.PAC file:

function FindProxyForURL(url, host)
{



/* Block these */


if (shExpMatch(url,"*logmein.com"))
   { return "PROXY 127.0.0.1:8081;DIRECT"; }

if (shExpMatch(url,"*google*"))
 { return "PROXY 127.0.0.1:8081;DIRECT"; }





/* Allow everything else */


else
 return "DIRECT";
}
  • This works with other browsers like Chrome? – Gabriel Valente May 16 at 16:38
  • This will also work with Google Chrome as this uses the same proxy window as IE. Other browsers (Firefox) will need the proxy setting within the browser set manually (or you could look at getting ADMX files for more browsers and setting this from a GPO too) – jamiet147 May 17 at 8:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.