[SOLVED] Looking to block internet browsers on a business pc

[ShadowS988]

Hey all I’m setting up work PCs for my business and in need to disable internet browsers so they can’t go on the internet. The pc needs to be connected to talk to a server but I would like it so they can’t go on a web browser.

 

[Darkbreeze]

Disable Internet access on a Windows PC | TechRepublic

Learn several options for disabling Internet access on a single system while still allowing other systems on the same network to access the Internet.

www.techrepublic.com

 

[USAFRet]

Hey all I’m setting up work PCs for my business and in need to disable internet browsers so they can’t go on the internet. The pc needs to be connected to talk to a server but I would like it so they can’t go on a web browser.

Do you want to block browser functionality, or do you want to block internet access?
They are not quite the same thing.

 

[Darkbreeze]

Do you want to block browser functionality, or do you want to block internet access?
They are not quite the same thing.

Exactly right. Different things altogether.

 

[ShadowS988]

Do you want to block browser functionality, or do you want to block internet access?
They are not quite the same thing.

I would like to block all web browsing so the standard account can’t use a web browser to access the internet or download a web browser. I need the PCs to have internet access to talk to the server.

 

[USAFRet]

I would like to block all web browsing so the standard account can’t use a web browser to access the internet or download a web browser. I need the PCs to have internet access to talk to the server.

It seems they need LAN access, not internet access. Completely different.

Block outside traffic at the border device. Whatever router you use.
Whitelist only those systems that DO need outside access. All others, deny.

 

[ShadowS988]

Thing is the server is at a different location for 2 of the PCs. Is there a option in windows to block a web browser access and installing other web browsers?

 

[USAFRet]

Thing is the server is at a different location for 2 of the PCs. Is there a option in windows to block a web browser access and installing other web browsers?

A Standard user can't install anything, without the Admin password.
Again, you block or allow traffic at your border device. Not the individual systems.

"Systems A, B, and C can only connect to IP address <whatever the server is>. Deny all other outside access."
Also, look into VPN. Virtual Private Networking. It creates a tunnel to your outside server, and everything appears as being on the same "LAN".


It sounds like you need some onsite consulting, from a local networking person.

 

[hotaru.hino]

You can still install applications without admin privileges as long as they don't try to install in a protected directory (like Program Files) and/or write to the registry. For example, Portable Apps. Also Discord and Chrome do local account installs.

But yeah, would agree this would be easier to do on the network level.

 

[USAFRet]

You can still install applications without admin privileges as long as they don't try to install in a protected directory (like Program Files) and/or write to the registry. For example, Portable Apps. Also Discord and Chrome do local account installs.

But yeah, would agree this would be easier to do on the network level.

Well, yeah...PortableApps. Run with no install at all, direct from a USB.

 

[hotaru.hino]

Well, yeah...PortableApps. Run with no install at all, direct from a USB.

You can install them locally as well. But either way, they don't write to the registry and so as long as you install them to a folder the account can write to, the account can install whatever they want.

 

[Math Geek]

right i use portable apps to get around all the blocks on the school pc's i had to use. so a local policy on each pc is not really going to stop someone who knows what to do. it's easy to go around any of those policies.

as UAFRet noted, allow a specific server ip at the border device and block all others. not they can fire up whatever they want and it's not going to connect to anything but that one single ip. the vpn idea is also a VERY good idea for pc's that are connecting from outside the local network. much more secure than simply logging by password or whatever.