Block Mozilla, Opera , Safari etc from accessing internet
Hi All,
I am looking for a solution by which I can block web browser (except Internet Explorer) from accessing internet or even from running.
Let me explain the scenario:
1. I have few workstation (WinXPs) under domain.
2. I need to restrict users from using Mozilla Firefox, They are suppose to use IE only.
3. Mozilla has got a Portable version, which does not require installation, Its a single exe which runs on its own. (As its an exe, I can not restrict it through Group Policy because then my other applications will get affected) Ref:
http://sourceforge.net/projects/portableapps/files/Mozilla%20Firefox%2C%20Portable%20Ed./Mozilla%20Firefox%2C%20Portable%20Edition%203.6.13/FirefoxPortable_3.6.13_English.paf.exe/download
4. I need to stop this portable mozilla.
Please revert as I have done lot of googling, and tried all general ways (like local firewall, registry editing etc.) but none seem effective.
Also, please note that: I was successfull blocking by ZoneAlarm, but some tecchi renamed the executable and Mozilla was running again.
Plz help.
Regards,
NutanNutan Vishwakarma (IT Security Consultant)
April 26th, 2011 2:35pm
Nutan,
There is always a way to bypass it :).
The only thing what you can do is make it harder for the end user.
Some options that you can use are:
Look if the firefox executable is signed if this is the case create with applocker an publisher rule that denies the excution.
If you have a advanced proxy server look if you can allow only the IE user agent (http://en.wikipedia.org/wiki/User_agent)
You can create a Shim that blocks for applications where the company name is ... or where the product name is ...
(http://www.msigeek.com/4823/creating-a-shimfix-using-compatibility-administrator)
...
Kind Regards
DFTIM me - TWiTTer: @DFTER
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2011 3:10pm