I'm looking to set up strict internet controls on my Windows system to dictate which applications can access the internet without changing anything on my router or buying additional hardware. My primary goals are to grant internet access only to apps I approve, like Roblox, while blocking all web browsers and browsing capabilities across the board. Specifically, I want a solution that prevents users from bypassing restrictions by renaming executables or using portable versions of browsers. I've tried using a custom script to monitor processes, but I'm not sure this is the most effective method. I'm hoping for a more reliable, built-in solution such as group policy changes, firewall settings, or other suggestions to enforce these restrictions across all users without relying on external configurations. Any advice would be appreciated!
5 Answers
You could definitely use Windows Firewall for this. Set it up to allow only specific applications by their paths while blocking all other outbound traffic. It's a straightforward method and should give you the control you're looking for.
Simple scripts aren't the way to go for this; you really should be looking into group policies to lock down your Windows setup. If you properly restrict what's allowed to be installed or run, that would be your best bet. Otherwise, users will just find clever ways to run whatever they want.
Have you considered using an endpoint management solution? Products like FortiEDR or FortiClient could do the job, offering more comprehensive control over what goes in and out without much hassle.
If you're looking to block specific websites, using the hosts file might seem old school, but it could work. Just remember that it requires you to block by domain, so you'll have to manage a list of blocked sites to fit your requirements.
The built-in features probably won't fully meet your needs since what you're asking for is quite advanced. You might need something like Windows Defender Application Control or AppLocker, which can whitelist by signature or path, but remember, you’ll have to update those as you change apps.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures