Kaseya Community

Block all websites except for company's site

  • Hi,

    Can we do it with Kaseya? The environment is Windows XP 32-bit and the users are logging in as administrator.

    We managed to do it with parental control but it is useless if the users are logging in with administrator account.

  • Do you want the desktop computers to have no access to the internet? If this is a 'simple' network (meaning a single class B or C network, without any strange routing or vlans), why not just remove the default gateway on the machines?

    This would work perfectly if the Kaseya server is in the same subnet. If it is not, just add a static route for IP.ADDRES.OF.KSERVER to the machines.

  • I need to set it that the machine could only view the company website and not others. In short, block ALL except one

  • There is a script somewhere around here that can set IE to use a false/bad proxy, and put a site in the 'bypass proxy' list so that it can be accessed.

  • I can't attach any files, but here's the script you're looking for:  I took out our name and the customers so it may look strange allowing just weather.com and stuff. :D

    Hope it helps. If you need an un-lock for this you can just go in reverse. it's all just reg keys. Cheers!

    <?xml version="1.0" encoding="utf-8"?>
    <ScriptExport xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="http://www.kaseya.com/vsa/2008/12/Scripting">
      <Procedure name="IE Lock Down" treePres="3" id="1282871557" folderId="47117283213231622312365132" treeFullPath="_0_IEG_Custom Scripts.Lockdowns">
        <Body description="Sets fake proxy to block all traffic and adds allowed list in exception rule. Put the allowed websites in step 3 separated by a &amp;#34;;&amp;#34; ">
          <If description="Sets fake proxy to block all traffic and adds allowed list in exception rule. Put the allowed websites in step 3 separated by a &amp;#34;;&amp;#34; ">
            <Condition name="True" />
            <Then>
              <Statement name="UseCredential" continueOnFail="false" />
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable" />
                <Parameter xsi:type="StringParameter" name="Value" value="1" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer" />
                <Parameter xsi:type="StringParameter" name="Value" value="127.0.0.1" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride" />
                <Parameter xsi:type="StringParameter" name="Value" value="*.centralfrieght.com ; *.abfs.com ; *.con-way.com; *.dhl-usa.com ; *.fedex.com ; *.odfl.com ; *.roadway.com; *.saia.com; *.ups.com; *.weather.com" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="String" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions\NoBrowserOptions" />
                <Parameter xsi:type="StringParameter" name="Value" value="1" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Connection Settings" />
                <Parameter xsi:type="StringParameter" name="Value" value="1" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Proxy" />
                <Parameter xsi:type="StringParameter" name="Value" value="1" />
                <Parameter xsi:type="EnumParameter" name="DataType" value="Integer" />
              </Statement>
              <Statement name="SetRegistryValue" continueOnFail="true">
                <Parameter xsi:type="StringParameter" name="RegistryPath" value="HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page" />
                <Parameter xsi:type="StringParameter" name="Value" value="http://www.mycompany.com"/>
                <Parameter xsi:type="EnumParameter" name="DataType" value="String" />
              </Statement>
            </Then>
          </If>
        </Body>
      </Procedure>
    </ScriptExport>