SOLVED
Home

Control Website Access using Intune/EMS

%3CLINGO-SUB%20id%3D%22lingo-sub-225077%22%20slang%3D%22en-US%22%3EControl%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225077%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20to%20control%20website%20access%20(block%20some%20websites%20like%20gmail%20etc.)%20on%20managed%20computers%20using%20Intune%2Fconditional%20access%2FEMS%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20want%20to%20control%20it%20for%20roaming%20employees%2C%20so%20cannot%20do%20this%20with%20firewall%20and%20are%20cloud%20only%20company%20with%20no%20on%20premises%20AD%2Fproxy%2FGPO.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20looking%20at%20managed%20browser%2C%20not%20sure%20if%20it%20can%20solve%20the%20purpose.%20I%20am%20not%20sure%20if%3A%3C%2FP%3E%3CP%3E1.%20Managed%20browser%20will%20stop%20use%20of%20other%20browsers%20to%20open%20these%20websites%3F%3C%2FP%3E%3CP%3E2.%20It%20seems%20its%20not%20available%20for%20Windows%2010%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20inputs%20will%20be%20appreciated.%20Many%20thanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-225077%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eweb%20filtering%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-234171%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-234171%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-233994%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-233994%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20use%20Windows%20Defender%20Applikation%20Guard%20-%20so%20only%20approved%20websites%20can%20bu%20opened.%20All%20other%20websites%20are%20opened%20in%20a%20container%20raised%20Edge%20Browser%20and%20do%20not%20have%20access%20to%20the%20host%20machine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227081%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227081%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Erik!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-225778%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225778%22%20slang%3D%22en-US%22%3EDon't%20think%20this%20is%20something%20you%20can%20do.%20Conditional%20access%20can%20be%20used%20to%20manage%20access%20to%20resources%20you%20control%2C%20so%20that%20won't%20help%20for%20sure.%3CBR%20%2F%3EAlso%20don't%20think%20there%20is%20a%20real%20watertight%20solution%20to%20prevent%20people%20from%20using%20%22another%22%20browser%20to%20access%20the%20websites%20you%20don't%20want%20them%20to%20go%20to.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Vineet Arora
Contributor

Hi,

 

Is it possible to control website access (block some websites like gmail etc.) on managed computers using Intune/conditional access/EMS?

 

We want to control it for roaming employees, so cannot do this with firewall and are cloud only company with no on premises AD/proxy/GPO.

 

I was looking at managed browser, not sure if it can solve the purpose. I am not sure if:

1. Managed browser will stop use of other browsers to open these websites?

2. It seems its not available for Windows 10?

 

Any inputs will be appreciated. Many thanks!

 

4 Replies
Don't think this is something you can do. Conditional access can be used to manage access to resources you control, so that won't help for sure.
Also don't think there is a real watertight solution to prevent people from using "another" browser to access the websites you don't want them to go to.

Highlighted

Thanks Erik!

Solution

You can use Windows Defender Applikation Guard - so only approved websites can bu opened. All other websites are opened in a container raised Edge Browser and do not have access to the host machine.

Thank you!

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies