how do i block sites from within W2k server?

[energy4life]

Folks,

Just when I think I'm beginning to learn the basics... I'm stumped on another piece of Win2k administrativeminitua. How do I block selected Internet sites from users in a given OU?. I DO NOT want to do this client side from each browswer (where the porn filter runs). There's gottta be a way to administer within group policy... (right?)

 

[dankelt]

I'm not sure of any way to do this in Group Policy, but if you have your own dns server, you could just create fake entries for the sites you don't want people to be able to access. Or block the ip addresses of the sites on your router. Just some random thoughts...


Dan

 

[koquito]

Well this is another idea..MAybe it seems complicated but is not..
You can load settings into the workstation registry automatically at log on, if you set every user to use a log on script on the server.
1* Run regedit on any workstation and browse it to this point HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains then go to File menu and export it.
2* Go to that file you just saved and right click on it and select Edit (With NotePAd)

Now comes the part that you want

to block the sites..i will use for example

http://www.badsite.com

3* NOw with notepad opened, right after where it says "Domains" you have to add Folders with the reverse order of the site URL.
In this case you have to add badsite.com\www]
and right after the bracket you add
"http"=dword:00000004
so at the end everything will be like

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\badsite.com\www]
"http"=dword:00000004

that value of 4 means that the site

http://www.badsite.com

will be blocked.

If you need to add another site, just repeat the same until Domains, the after that teh same procedure (For example to disable

http://www.xxx.com

, add \xxx.com\

http://www]"http"=dword:00000004)

4*Now save the file under SYSVOL folder(on the server ) or to a floppy (copy it after this to SYSVOL folder on the server) with the extension .reg. LEts call it blocker.reg

5*OPen a new Notepad document, and write on it "regedit /s blocker.reg"
6*SAve that file at the SYSVOL folder (on the server) with the same name, but with extension .bat..like blocker.bat.
7*THe go under the USer properties in Active Directory and Under PRofile tell it to run the File blocker.bat as a Script.

that will block the site for that user or any site that you add in that particular way...
IF it seems too complicated to you, you can try dankelt idea..
Good Luck!!!

A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[koquito]

oopss..sorry, that wont work, it will only tell you that is a restricted zone...not actually block it..
I will keep the search ...
A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[energy4life]

koquito, yes that *does seem complicated. You're way more adept than me, that's for sure.

For now, the only solution I've come up with is client side, from within the internet filtering software. ...a solution that won't scale (which makes it less than ideal), but can work on our small LAN (which makes it a workaround).

thanks for passing on any ideas