
You can apply this group policy to individual users or whole OUs as you see fit and will work well across all devices.īe wary though with Windows Firewall the order of rules doesn’t really matter, Block actions will take priority over Allow rules. If we didn’t do both then a proxy could exist on your network in the private IP ranges (which are allowed) and therefore have internet activity. These technologies come inbuilt with Windows.

This tutorial suggests using Windows Firewall managed through Active Directory to block all internet IP addresses in additional to enforcing a non-existent proxy. Update – Thanks to Lou and Peter for pointing out the errors in the post which could conflict with DHCP operation. This method will work for some things, but the problem is not all software necessarily uses these settings to connect to the internet and doesn’t necessarily stop a determined user or bad guy.

There are plenty of tutorials out there detailing a way to block access is via enforcing a non-existent proxy. I’ve tested this on Windows 7 and Windows 10 and it works great! This how to will show you how to block internet access for a user, users or computer within an Active Directory Group Policy Object.
