Group Policy to restrict Internet Access

Source

Internet Explorer Maintenance is used to manage and customize Internet Explorer on computers running Windows 2000 or later. You can enable Internet access options such as the Browser UI, connections, URLs, proxy settings, security zones, Favorites, and Internet Explorer Enhanced Security Configuration component.

This article descript how to use Group Policy to restrict Internet Access by assigning a fake IP to proxy. In our case, you have some clients accessing your system using Terminal Services and would like to restrict them to access the Internet except local Web server from the TS server.

To setup Group Policy to restrict Internet Access, follow these steps.

1. Open Group Policy by running gpedit if you use local group policy or running Active Directory Users and Computers to create a group policy.

2. Click User configuration>Windows Settings>Internet Explorer Maintenance>Connection (Figure).

3. Right-click on Proxy Settings and then Properties.

4. Check enable proxy Settings and type a fake IP address, for example 192.168.2.100 on HTTP (you don't have a proxy server or the proxy server is using the different IP).

5. Under exception, type the web server IP address, for example 192.168.2.10 (Figure).

6. Test it.

Related Topics

Configure Group Policy Object for Terminal Services Servers