Archived from groups: microsoft.public.win2000.group_policy (
More info?)
Go to a test computer that has the version of IE you want to control and
also the Windows Adminpak so that you can get to Active Directory Users and
Computers.
Go into Internet Options for IE and on the content tab click on the Content
Advisor settings button.
In the Content Advisor window, click on the Approved Sites tab and enter all
your approved sites
http://www.yahoo.com or whatever.
Then click on the General tab, uncheck "Users can see sites that have no
rating" and set the supervisor password
-------WARNING--------
DO NOT LOSE THE SUPERVISOR PASSWORD OR YOU WILL HAVE TO REINSTALL WINDOWS ON
THIS MACHINE.
Click OK out of Content Advisor and ensure to click the enable button on the
content tab of internet options. It will ask you to type in the supervisors
password to enable. Then click ok our of IE options
Test the setup by opening IE and browsing to both restricted and
unrestricted web sites.
If you are happy continue ....
Open AD Users and computers. Browse to the OU that contains the users you
want to restrict. Setup a new GPO for that OU. In the GPO goto:
User Configuration
Windows Settings
Internet Explorer Maintenance
Security
In Security open Security Zones and Content Ratings. Click Import the
current Content Ratings Settings. If you want, you can modify the settings
by clicking the modify button, but I would not recommend this because then
you cannot test the new settings.
Click OK and test the setup with a user that has the GPO applied.
Good luck
Charles
"Gautam" <kakkarg@hotmail.com> wrote in message
news:19cbc01c41cc3$203cc330$a101280a@phx.gbl...
> Hi,
>
> Is there any way in which I can restrict users in a
> Particular OU from not able to browse Internet Sites other
> than which I specify. For Example A user should be able to
> go to mail.yahoo.com and he should not be able to browse
> other websites.
>
> Please let me know how can I block site access???
>
> Regards,
> Gautam
Facebook
Twitter
Instagram