Hey guys
What is the best practice to stop a single pc from going anywhere on the world wide web but still able to access everything within the Local Area Network and still has internet access.
The goal for this computer is to not be able to visit any webpage but still have access to the internet. This request is because our email is through Google apps so in order for the PC to receive email it must still have internet access.
What I have done which is doing the job pretty well is going into internet options -> connections -> LAN settings -> use a proxy server and adding a bogus address. This disables browser interent access but still allows for internet connection and obviously doesn't affect LAN access but I mean anyone with a clue about computers will easily figure out how to change that.
Is it possible set this option to be unchanged even if the end user goes and trys to change it such as using group policy? If so I would need a help on how to configure
Also I am open to other ideas so my question to you is:
what is the best and most end user tamper free way to stop internet browsing on a single PC or group of PCs without losing LAN and internet access?