How to Block Internet Access on Servers through Terminal Using GPO

Blocking Internet access on Terminal Servers using group policy

Note : Backup before you try this!

Use a Group Policy Object (GPO) that forces Internet Explorer to use a proxy server with an address of 0.0.0.0 for port 80 requests. Then create another policy that states a user is not able to change the proxy server address in Internet Explorer. Both policies are applied to the user and not the computer. These settings tell Internet Explorer to call over to the non-existent proxy server for all internet requests. When the non-existent server does not respond, Web surfing is stopped.

The policy settings are located in the following locations in the GPO:

User Settings –> Windows Settings –> Internet Explorer Maintenance –> Connection
Then open the Proxy Settings window and add 0.0.0.0 for port 80.

User Settings –> Administrative Templates –> Windows Components –> Internet Explorer
Then set Disable Changing Proxy Settings.

Run gpedit.msc to open group policy management console

I normally do the same thing but replace the proxy settings ip address with the local host’s like so:

User Settings –> Windows Settings –> Internet Explorer Maintenance –> Connection
Then open the Proxy Settings window and add <b>127.0.0.1</b> for port 80.

User Settings –> Administrative Templates –> Windows Components –> Internet Explorer
Then set Disable Changing Proxy Settings.

Run gpupdate /force to update group policy or log off and login currently logged in user.

That's it.