After some review of IE security and noticed a flaw (read more) I needed to block users from all sites except those allowed. I used the IE content advisor and GPO to do this.
The first step is to create a septate group policy object or use a common one with other IE changes to help in the organization.
Once you have your group policy object editor open navigate to "User Configuration" > "Windows Settings" > "Internet Explorer Management" > "Security" and open "Security Zones and Content Ratings".
Click the radio button "Import the current content rating settings".
In the Content Advisor window click the Approved Sites tab there you will add the domains, sub-domains or IPs you approve or disapprove of and this will affect users that this policy applies to (it seems to also affect the server).
If you need more info, screen shots or other details let me know in the comments below.
Enjoy!
No comments:
Post a Comment