I'm looking at restricting internet access on some machines and I have some ideas I got from another thread, but thought I would run it by the community to see if I missed something elegant.
Here's the setup:
- Win 7 machines with AD.
- No internet access allowed on the boxes except for credit card transactions.
I'm thinking of using the local proxy method via GPO for IE and then disallow the Firefox and Chrome executables. This thread has some great suggestions on how to go about that.
http://community.spiceworks.com/topic/254414-how-to-disable-all-websites-but-one-using-gpo
I'm not sure yet what port(s) the credit card authorizations use to get to the outside world, but I figure I could whitelist those and call it good.
Anything I missed? It wouldn't be the first time!