Limiting Websites - KiXtart.org

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Lounge » Limiting Websites

Page 1 of 1

Topic Options

#114399 - 2004-02-19 04:57 PM Limiting Websites
Bob Deerinwater Bob Deerinwater Starting to like KiXtart Registered: 2002-05-05 Posts: 101 Loc: Covina California	I have the need to be able to limit Internet explorer to only go to a handful of sites. I have seen this but have no idea how they are doing it. Could any one lend some suggestions on this. Native Windows 2000 Environemnt with active directory.
Top

#114400 - 2004-02-19 04:58 PM Re: Limiting Websites
Kdyer Kdyer KiX Supporter Registered: 2001-01-03 Posts: 6241 Loc: Tigard, OR	Firewall Rules? This sounds like a Cisco or related issue. Kent _________________________ Utilize these resources: UDFs (Full List) KiXtart FAQ & How to's
Top

#114401 - 2004-02-19 05:01 PM Re: Limiting Websites
Bob Deerinwater Bob Deerinwater Starting to like KiXtart Registered: 2002-05-05 Posts: 101 Loc: Covina California	Oh by the way...No firewall...and the school will not spend the money on one.
Top

#114402 - 2004-02-19 05:24 PM Re: Limiting Websites
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Maybe specify an invalid proxy server on all the machines. Then add the domains they CAN go to, to the bypass proxy list. I believe this can all be done via registry keys and/or Policies.
Top

#114403 - 2004-02-19 05:31 PM Re: Limiting Websites
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	Proxy setups to limit intenet connectivity have already been discussed numerous times. Please use the BBS search to retrieve relevant threads. _________________________ There are two types of vessels, submarines and targets.
Top

#114404 - 2004-02-19 05:36 PM Re: Limiting Websites
Richie19Rich77 Richie19Rich77 Seasoned Scripter Registered: 2002-08-16 Posts: 624 Loc: London, England	One way would to put a invalid proxy server address, and then add exceptions for the addresses that you want the users to be able to get to. Will work, but not the best way to do things Rich
Top

#114405 - 2004-02-19 07:33 PM Re: Limiting Websites
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11629 Loc: CA	Bob, A lot depends on what type of access the users have on the computers and how smart each user is. You might be able to easily control some users with some cheap methods, but the more intelligent or savy users will probably get around most things you try. In order to really control the workstations you will need to either be well versed in network/desktop administration or purchase 3rd party tools to help you. Having a proxy server that the clients must use would be one good way to control IE but perhaps not other things you may want to control. You could add a TON of Websites in the LMHOSTS file to use the local host 127.0.0.1 but that is hard to manage and there are millions of Websites Fortres has some pretty good software for controlling systems, but is not free. http://www.fortres.com/
Top

#114406 - 2004-02-19 07:52 PM Re: Limiting Websites
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	I would set the proxy via policies and take away the connections tab in IE via policies as well. That way they cannot change the settings back. This should not be hard to do since they are all Win2k clients.
Top

#114407 - 2004-02-19 08:05 PM Re: Limiting Websites
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Quote: Oh by the way...No firewall...and the school will not spend the money on one. There are lot of free firewall and proxy servers out there. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#114408 - 2004-02-19 09:01 PM Re: Limiting Websites
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	Yeah, I think it's called LINUX See for example http://lrp.kioss.com/DiskImages.htm for floppy-disk-based Linux firewalls. _________________________ There are two types of vessels, submarines and targets.
Top

#114409 - 2004-02-19 10:07 PM Re: Limiting Websites
Bob Deerinwater Bob Deerinwater Starting to like KiXtart Registered: 2002-05-05 Posts: 101 Loc: Covina California	I guess i just have one last question is there a way to make it so that a user cannot change the url in address. My thought is that i map a drive on the server and put a couple of links the 5 websites that are needed to complete class and set the home page according to Group membership.
Top

#114410 - 2004-02-19 10:13 PM Re: Limiting Websites
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Im sure there is...But that isnt going to solve the problem unless maybe it's an elementary school. All they would have to do is something like Start/Run 'iexplore.exe address' to go to any other address.
Top

#114411 - 2004-02-19 10:30 PM Re: Limiting Websites
Bob Deerinwater Bob Deerinwater Starting to like KiXtart Registered: 2002-05-05 Posts: 101 Loc: Covina California	I have removed the run command off of the desktops. This is a computer learning school and it is just to keep the honest people honest and the wanderers a little mor difficult.
Top

#114412 - 2004-02-19 10:40 PM

Re: Limiting Websites

ShaneEP Offline

MM club member

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK

This should remove the address bar and remove the option the re-add it.

Code:

$null = WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions","NoToolbarOptions",1,REG_DWORD)
$null = WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions","NoAddressBar",1,REG_DWORD)

Top

#114413 - 2004-02-19 11:02 PM

Re: Limiting Websites

ShaneEP Offline

MM club member

Registered: 2002-11-29
Posts: 2127
Loc: Tulsa, OK

Bob...here are most of the keys to set if you want to go the route of the proxy settings. It will set IE to use the proxy server of 0.0.0.0 (which is invalid of course) except for the domains you list in the Proxy Override key. The only problem I see with this solution is that the user has to have local admin rights to write the policy keys which prevent them from being able to change hte proxy settings back. If the users are local admins then you shouldnt have any problems with this.

Code:

$null = DelValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","AutoConfigURL")
$null = WriteValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyEnable",1,REG_DWORD)
$null = WriteValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyServer","0.0.0.0:5555",REG_SZ)
$null = WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel","Connection Settings",1,REG_DWORD)
$null = WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel","Connwiz Admin Lock",1,REG_DWORD)
$null = WriteValue("HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel","ConnectionsTab",1,REG_DWORD)
$null = WriteValue("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyOverride","*.kixtart.org;*.kixforms.org",REG_SZ)

Top

#114414 - 2004-02-19 11:11 PM Re: Limiting Websites
Bob Deerinwater Bob Deerinwater Starting to like KiXtart Registered: 2002-05-05 Posts: 101 Loc: Covina California	I was just starting to play with that part of the registry..thanks for the help.
Top

#114415 - 2004-02-20 10:25 AM Re: Limiting Websites
Richard H. Richard H. Administrator Registered: 2000-01-24 Posts: 4946 Loc: Leatherhead, Surrey, UK	Attempting to stop inappropriate Internet access by the methods you are looking is absolutely guaranteed to fail. I advise you to not even think about going this route, but to do the job properly, which means controlling traffic at the access point, not at the client. You don't have to have a firewall, although it is a very good idea. A (well patched!) windows box with two NICs and a proxy will get you much further down the security route than what you are currently attempting. A Linux box with built-in firewall and something like SQUID proxy is even better, but would be a problem if you don't have the skill set to support it, and don't have the time to get the skills. How is your Internet access provided at the moment? Dial-up? Leased-line? Cable-modem?
Top

Page 1 of 1

Previous Topic View All Topics

Index Next Topic

Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart

Hop to:

Shout Box

Search the board with:
superb Board Search
or try with google:

	Web kixtart.org