hi their i have a solution for you as one guy said use a proxy server. this is the most effecient and user friendly way of doing things. i take it you have an active directory with all your users profiles and group policies on. this is dead simple and best of all this software is free and can be obtainted @
http://opensource.censornet.com/. this program is fantastic and is dead easy to set up takes 30 mins of time and that is it. your whole network will be filtered. it is called censornet and best of all the opensorce version is completly free. hardware requirements will run on pretty much anything being as it is built on linux so uses very little resourse. censornet has been around for ages all i can say when i was at school they were using it. you can set specific sites you can also set groups with different set ups eg you could have a group called students staff and admins admins can access every things students can only access appropiate material and staff can acceess certian sites. the great thing about it is it logs everything from when the user signs on to the internet and what sites were visited and at what time. also you can set time limits to ither users or groups. i no when i was at school coz it was a bording school things like msn and bebo and non work related sites were blocked till a certian time like after school and at 20:00 every night the internet to the student group was desabled. the staff could stll access however students would get a message saying the internet has been disabled reason time limit exceeded a full log of your internet activity has been sent to the it dept for review. and the user could do no more. so you could implement this into your work plcace. you can create a group called permantly blocked you want put the users u dont want access to it in and set it to be permently disabled so even if they slipped in to the office they wouldnt get out on to the net coz it would be restricted. so he gets fed up logs off then someone who works in the office who is auth to do so logs in and access the internt fine. so u can lock down groups or individule users or pcs set time limits for certain users. so say you have someone in the office who is abusing the internet you can go to his user indivdually doesnt matter what group he is and individully lock him out of the internet or set a time limit. and because censor net is so easyly accessed via web based interface the administrators can add change settings in seconds even block a website or set a spceific time scedule this can be done from any workstation in the building or at home. that way it is all done at network level rather than going to all your machines individually. it can not be bypassed as its inteligent engin can block any attepts to by pass. the only way to bypass it is to plug your workstation before the proxy. if u have active directory you dont have to sit there and manually enter each user and permissions 1 by one it you can import the whole list of users off the active directory and you can also do this for computers which you can lock down by mac address. so if someone brought their laptop in and plugged in it wouldnt let them use the net and till u added their mac address to the allow list then they could access once they have enterd their username and password. then assign groups or certain user permissions then your all filtered doesnt matter what pc those paticular users in question go to they will be refused internet access with no get arround because as soon as you close off the web page and reopen it requires you to log in again. if u use transparent authentication the active directory has to be active as if it goes down the net will stop for everyone. when the user clicks internet explorer or any browser it will requre a user name and password the user just enters the same details as he/she did to log in to the coputer (same username and password as on active directory) if that user has permissions it will let them straight on if that user doesnt then it will come up with your internet account has been disabled contact you it manager. you can customize what it says. if someone who has granted access goes on a site that has been blocked it will come up with a message sayin blocked and a log of the site has been sent to it for review then underneeith that there is a button that says request unblock. this alows the user to fill in a small online form with the reason they want the site unblocked. that message will be sent to the it admin and he can unblock it if he thinks its ok to use. but it can also block certain apps like msn yahoo messenger from running you can also block all access to web mail to prevent users using their own personal emails. there is so many features in this program. i use this myself when setting up networks with multipul users and workstations. so easy to manage the internet and make it a safe and non time wasting tool. you can also block downloads so if someone tries to download a file or program it will block it and send a log. it also has sevral antivirus engins built in so it keeps ur network malware virus and spyware free. it can also close all ports to gaming so if someone tries to launch an onlime game it will block it and send u the log of what user what computer what time and what date. you can also use this without active directory you will just have to manually enter the users and it will use its own authentication method. i have gone on long enough about its fantastic features now the setup.
first of all you will need an old or new pc that isnt been used for anything. it will need to have 2 ethernet cards and a copy of censornet.
the fist ethernet card will plug directly into your internet connection or hardware firewall depending on netwrok. ie broadband comes from outside in to a coprate hardware firewall then in to 1 of the ethernet ports of proxy. the other ethernet port is plugged into you hub or switch normally on your backbone where servers and routers are connected and remaining switches/hubs/ on the backbone normally the hubs and swiches will be liked to other switches and workstations depending on how many. that way everything comeing from broadband or isdn has to pass through the censornet proxy server first before it hits your corprate network. that way no users will be able to bypass it as they wont be able to get infront of censornet or the hardware firewall. so you can feel safe it wont be bypassed. just make sure it is locked in a room as when i was at scool the prxy was in the same room so i pluged my laptop straight into the internet bypassing proxy that was soon changed and it was all soon locked out if u have it locked away and not in reach of user access it wont be bypassed. now your intire network is running as nomal. install censornet on the machine that is in place with two ethernet cards do this with the network cables unpluged from the proxy server to prevent the network going down. once all installed put your 2 ethernet cables in and setup. then seach for users and computers it will then look at your active directory and import all users and computers. once that is done you can create groups ie office maintanice admin and set up the permissions time limits and website restrictions for your users. then you can choose all machines to work or you can set it up for mac address assigning. ie some brings their laptop in and joins to the wireless network if they go on the internet it wont let them on unless u add there mac address to the allow list. once this is done just put the ip address of censornet in the prxy settings of workstation or laptop and when he then clicks on the internet it will requre user name and password then it will let that person on if he/she has permisiions. u can disable that laptop or any workstation from connecting to the proxy at any time by going and blocking it at a certain time. once your all done the boss and it manager can have the web address for the proxy by this point all pcs/laptops on the network are now on the filtering system. if a member of staff comes to you and says can i have internet access granted for 1 hour because you band it for misuse you can enable it for 1 hour for that user once that time is up that users internet will be disabled while everyone else with granted access in still surfing. the boss or it manager can log in from home or his workstation to the censornets web interface user friendly and change the permission.by disabling users or computers from the proxy it wont stop people loging in to the computers for nomal use they just wont have the net.i have gone on for ages i hope this helps i have a+ in it and Cisco certified at CCNA1 level so i hope this info is useful. sorry if the writing is speled wrong as it is late at night i would love to here how you get on my email is
jhope46@gmail.com if you need further support dont hesitate to email me many thanks for yor time.
Linear Mode
