Dedicated web sites,

[@leJek]

Hi,

I have such problem . At my job some users need to use Internet to their
daily basis at office some of them don't need it , some of them are
using dedicated web sites. The problem is all of them are using internet
too much esp those one with dedicated web sites. Dedicated web sies i
means that they have list of web sites in Favoritues taht they should
use during job.
Question :.

1 Is it possible via GPO to not allow them to use other sites than those
in Favoritues
2. Is it possible via GPO to block some users acces to Internet

Thanks for any help

Chris

[Roger Abell [MVP]]

It really sounds like you should be looking at a proxy functionality
at your network edge rather than group policy. Ex. ISA server
could control internet access to do this if you also pushed the
allowed list out as favorites via GP and configured it in ISA.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4
"@leJek" <ole...@no-spam-wp.pl> wrote in message
news:O8mH7490...@tk2msftngp13.phx.gbl...

[chris]

Roger,

Thanks for your reply., but can I add soem web site to trusted sitres (
I know I can do it in GPO ) and then tell to firewalll administrator to
block all site beside trusted in IE??? Does it make sence

Chris

[Roger Abell]

I am not really one with detail knowledge of all the available
IE policy settigs.
However, I would recommend that you do not set into Trusted
Sites zone a host that is not under your control. IE is simply too
weak at the present time.

Other than the above, what you outline sounds like it could work,
depending on other factors of your workplace.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"chris" <ole...@no-spam.wp.pl> wrote in message
news:uIwBDSZ...@TK2MSFTNGP11.phx.gbl...

[Gcorpuz]

I think you need some third party " Content Filtering", based from my past
experiences, we've never had a lock with the GPO..

Content Filtering I think is your best bet since you don'tt need to modify
any Proxy Server zones/DMZ zones if you have a big network..It can run on any
x86 server and just use GPO to redirect their IE proxy settings to that
server and any http port 80 requests that violates your rule, they will be
denied access..