Software to restrict web access on work PC (Windows XP)

R

Rikki

2[H]4U
Joined
Oct 8, 2000
Messages
2,302
Hey folks,

Just wondering what people would recommend to restrict web access on an office PC. I know IE has inbuilt stuff but from memory its fairly crap.

Ideally something that limits typing in URLs and clicking links would be great, IE used to throw a password prompt every time an IMG or advert was attempted to load from a site not in the approved list - pain in the ass!

Any info thankfully received :)

R.
 
Are you trying to make the internet not usable on this specific pc?

What I do is set internet connection settings manually.

Go to internet options, connections, lan settings. Where ti says proxy server, check that box, click bypass proxy server for local addresses. Proxy server, just put in whatever, like noip.proxy.com and ue port 8080 or whatever.

Hit save.

No more internet! Now, since it is Friday, do this to your coworkers!
 
www.opendns.com should do the trick for you.
create a account, then set the kinds of sites that you want to block.

You can setup openDNS network wide or just the one computer. They have some pretty good instructions on their site for all major oses.

I just thought of another way. you can also block URLs with the hosts file.
http://www.mvps.org/winhelp2002/hosts.htm has some good standard hosts files listed that block alot of major advertising sites. you'd have to manually add to it if it doesn't include the sites that you want blocked.
 
Thanks for the replies.

Just wanting to allow access to some specific sites we use to stop people going onto youpr0n and other places - so looking for a whitelist type solution.

Cheers

R
 
Looking for something paid for, free, something you need to setup in house or something online?

OpenDNS would be the easiest to setup. If you have AD already installed and configured take your AD DNS servers and on the forwarders tab put in the open dns values. That should block all porn, time wasting, and etc you need. OpenDNS works, but it's not a pick and choose thing. It will stop all of it from happening. You want to stop facebook, you stop it for all.

Not sure if your apposed to something like untangle, but you could check it out. Put it in bridge mode between your firewall / router and your switch. That would allow you to do a little more granular setup of your web filtering
 
they are really looking at that stuff at work? YOU'RE FIRED! How do they still have a job?
 
You could just create a GPO (or edit the machines GPO) to limit the functionality of IE so that when you open it, the address bar is missing and the user only gets a list of favorites to follow, it will work fine as long as none of the sites have external links to google or other search enngines...
 
Deimos said:
You could just create a GPO (or edit the machines GPO) to limit the functionality of IE so that when you open it, the address bar is missing and the user only gets a list of favorites to follow, it will work fine as long as none of the sites have external links to google or other search engines...
Click to expand...

but if you hit windows key + r and type in the address, you didn't really remove the address bar, and the address bar is still available in windows explorer, and from task manager you can start a new task and get the run dialog. Then, you can also start IE from the command line and have it go to the site you want.

This is why you have to control it at the gateway. They can do all they want on the client, but you got control over everything without gpo's.
 
You must log in or register to reply here.
Back
Top