Jump to content



Photo

GPO to block Windows Live Messenger?


  • Please log in to reply
5 replies to this topic

#1 gjm75

gjm75

    Neowinian

  • Joined: 07-January 05

Posted 24 August 2006 - 02:36

I have been assigned to find a way to block msn, windlows and live messenger for a specific department. I thought the easiest way would be to block it by GPO, and I already have to block MSN and windows messenger, but this policy seems to have no effect on live messenger. Does anyone have any ideas or experience on how to block it using group policy?


#2 vetJohn

John

    Neowinian Senior

  • Joined: 28-January 02
  • Location: Des Moines, IA

Posted 24 August 2006 - 02:48

You could use Software Restriction Policies to block the .exe by name, or by hash (so a renamed copy can't run) (Y)

#3 MagicMan

MagicMan

    Neowinian

  • Joined: 12-May 03
  • Location: Somewhere in the UK

Posted 24 August 2006 - 12:46

You could use Software Restriction Policies to block the .exe by name, or by hash (so a renamed copy can't run) (Y)


Software Restriction Policies is an excellent idea if you need a GPO solution. I have to allow certain people from certain departments and non of them are in the same OU. I have had to use our filtering software to block webmail domains aswell as some of the specific URL's and IP's that Messenger uses to communicate with the network. As a product, it is very clever at getting a connection to the internet via any TCP port so blocking the websites that it communicates with did it for me.

#4 kazgor

kazgor

    Neowinian

  • Joined: 30-December 01

Posted 24 August 2006 - 16:51

Hi Magic, could you perhaps going into a little more detail how you blocked MSN and its like.. unfortuantely a few users have abused the free use or our internet and my MD now whats to ban such apps and be a lot more restricted.. I dont see why those users should ruin it for others who use it moderately so would be nice to ban them and only when they agree to behave to allow access again.

ta

#5 Aaron P

Aaron P

    Power to the peaceful

  • Joined: 19-September 01

Posted 25 August 2006 - 05:00

Here's a method for blocking Messenger via the user-agent string with ISA Server: http://www.isaserver...Some-Users.html. You mileage may vary depending on what firewall/proxy you have.

#6 MagicMan

MagicMan

    Neowinian

  • Joined: 12-May 03
  • Location: Somewhere in the UK

Posted 25 August 2006 - 12:35

Hi Magic, could you perhaps going into a little more detail how you blocked MSN and its like.. unfortuantely a few users have abused the free use or our internet and my MD now whats to ban such apps and be a lot more restricted.. I dont see why those users should ruin it for others who use it moderately so would be nice to ban them and only when they agree to behave to allow access again.

ta


Well so far, I've blocked (Within Websense on ISA Server but you acomplish the same by just using an ISA Server blocklist)

http://login.live.com
https://login.live.com
http://spaces.live.com
http://207.46.25.5
http://207.46.25.9

And that, so far, has done the job. I do also have a policy that allows those sites for certain (Trusted) users