gjm75 Posted August 24, 2006 Share Posted August 24, 2006 I have been assigned to find a way to block msn, windlows and live messenger for a specific department. I thought the easiest way would be to block it by GPO, and I already have to block MSN and windows messenger, but this policy seems to have no effect on live messenger. Does anyone have any ideas or experience on how to block it using group policy? Link to comment Share on other sites More sharing options...
John Veteran Posted August 24, 2006 Veteran Share Posted August 24, 2006 You could use Software Restriction Policies to block the .exe by name, or by hash (so a renamed copy can't run) (Y) Link to comment Share on other sites More sharing options...
MagicMan Posted August 24, 2006 Share Posted August 24, 2006 You could use Software Restriction Policies to block the .exe by name, or by hash (so a renamed copy can't run) (Y) Software Restriction Policies is an excellent idea if you need a GPO solution. I have to allow certain people from certain departments and non of them are in the same OU. I have had to use our filtering software to block webmail domains aswell as some of the specific URL's and IP's that Messenger uses to communicate with the network. As a product, it is very clever at getting a connection to the internet via any TCP port so blocking the websites that it communicates with did it for me. Link to comment Share on other sites More sharing options...
kazgor Posted August 24, 2006 Share Posted August 24, 2006 Hi Magic, could you perhaps going into a little more detail how you blocked MSN and its like.. unfortuantely a few users have abused the free use or our internet and my MD now whats to ban such apps and be a lot more restricted.. I dont see why those users should ruin it for others who use it moderately so would be nice to ban them and only when they agree to behave to allow access again. ta Link to comment Share on other sites More sharing options...
Aaron P Posted August 25, 2006 Share Posted August 25, 2006 Here's a method for blocking Messenger via the user-agent string with ISA Server: http://www.isaserver.org/tutorials/ISA-Fir...Some-Users.html. You mileage may vary depending on what firewall/proxy you have. Link to comment Share on other sites More sharing options...
MagicMan Posted August 25, 2006 Share Posted August 25, 2006 Hi Magic, could you perhaps going into a little more detail how you blocked MSN and its like.. unfortuantely a few users have abused the free use or our internet and my MD now whats to ban such apps and be a lot more restricted.. I dont see why those users should ruin it for others who use it moderately so would be nice to ban them and only when they agree to behave to allow access again. ta Well so far, I've blocked (Within Websense on ISA Server but you acomplish the same by just using an ISA Server blocklist) http://login.live.com https://login.live.com http://spaces.live.com http://207.46.25.5 http://207.46.25.9 And that, so far, has done the job. I do also have a policy that allows those sites for certain (Trusted) users Link to comment Share on other sites More sharing options...
Recommended Posts