domain policies to locked down a specific url 5

[slurpyx]

Guys.. i dont know how and where can i do this, it can be a third party software or pure domain policies. but my problem goes a bit like this:

my boss email this to me this morning:

I need you to come up with a set of domain policies for the operators so that the terminals are locked down and the only thing that can be accessed is 1 website and there should be only 1 link on the desktop to open the casino website. Need this asap.


--------------------

Guys... i need help!

 

[MattWray]

I don't think this can be done with policies alone. I believe you need to set up either Proxy or 3rd party software.

We are actually looking into this also. I had a web demo for WebMarshal which looks OUTSTANDING! [Thanks to AlexIT for that one!]

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[markdmac]

We use Microsoft ISA Server at a number of clients and restricting destination access is simple.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[gdvissch]

You could do this with an IPSec policy that allows only the DNS name or IP address as destination for TCP port 80...

run secpol.msc and add a new IP security policy

 

[minxca]

Yes, you can do it with GPO. I had done this before i installed ISA.

Move the users to the right OU and then:
~~~~~~~~~~~~~~~~~
User config, Windows Setting, Internet Explorer Maintenance, Connection, Proxy Setting -->

1. Enable proxy setting, http: 127.0.0.1, Use the same proxy.....
2. Do not use proxy server for....Enter *.mydomain.com or *.mydomain.* (up to 255 char)
3. Do not use proxy server for local addresses....

~~~~~~~~~
Change the default home page from IE Maintenance, URL
~~~~~~~~
~~~~~~~~~~~~~~~
You have to hide the IE Internet setting to prevent users change their proxy:

User config, Admin Templates, Internet Explorer, Internet control Panel, Disable the connection page. (you can disable all so they can't change the default home page, etc)

This will work, but I don't know if they install 3rd party browser (AOL, Netscape).

 

[gdvissch]

Winoto,
Very simple but very nice!
(I knew about it, but I had forgotten ... I gave you a star for making me remember

 

[MattWray]

That was great Winoto! Never knew that, and I think I'll use it myself...

Thanks,

Matt Wray

GFH

http://www.sss-steel.com

 

[slurpyx]

Tnx Guys!