SOLVED
Home

Control Website Access using Intune/EMS

%3CLINGO-SUB%20id%3D%22lingo-sub-225077%22%20slang%3D%22en-US%22%3EControl%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225077%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20to%20control%20website%20access%20(block%20some%20websites%20like%20gmail%20etc.)%20on%20managed%20computers%20using%20Intune%2Fconditional%20access%2FEMS%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20want%20to%20control%20it%20for%20roaming%20employees%2C%20so%20cannot%20do%20this%20with%20firewall%20and%20are%20cloud%20only%20company%20with%20no%20on%20premises%20AD%2Fproxy%2FGPO.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20looking%20at%20managed%20browser%2C%20not%20sure%20if%20it%20can%20solve%20the%20purpose.%20I%20am%20not%20sure%20if%3A%3C%2FP%3E%3CP%3E1.%20Managed%20browser%20will%20stop%20use%20of%20other%20browsers%20to%20open%20these%20websites%3F%3C%2FP%3E%3CP%3E2.%20It%20seems%20its%20not%20available%20for%20Windows%2010%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20inputs%20will%20be%20appreciated.%20Many%20thanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-225077%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eweb%20filtering%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-234171%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-234171%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-233994%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-233994%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20use%20Windows%20Defender%20Applikation%20Guard%20-%20so%20only%20approved%20websites%20can%20bu%20opened.%20All%20other%20websites%20are%20opened%20in%20a%20container%20raised%20Edge%20Browser%20and%20do%20not%20have%20access%20to%20the%20host%20machine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227081%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227081%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Erik!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-225778%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225778%22%20slang%3D%22en-US%22%3EDon't%20think%20this%20is%20something%20you%20can%20do.%20Conditional%20access%20can%20be%20used%20to%20manage%20access%20to%20resources%20you%20control%2C%20so%20that%20won't%20help%20for%20sure.%3CBR%20%2F%3EAlso%20don't%20think%20there%20is%20a%20real%20watertight%20solution%20to%20prevent%20people%20from%20using%20%22another%22%20browser%20to%20access%20the%20websites%20you%20don't%20want%20them%20to%20go%20to.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Highlighted
Vineet Arora
Contributor

Hi,

 

Is it possible to control website access (block some websites like gmail etc.) on managed computers using Intune/conditional access/EMS?

 

We want to control it for roaming employees, so cannot do this with firewall and are cloud only company with no on premises AD/proxy/GPO.

 

I was looking at managed browser, not sure if it can solve the purpose. I am not sure if:

1. Managed browser will stop use of other browsers to open these websites?

2. It seems its not available for Windows 10?

 

Any inputs will be appreciated. Many thanks!

 

4 Replies
Don't think this is something you can do. Conditional access can be used to manage access to resources you control, so that won't help for sure.
Also don't think there is a real watertight solution to prevent people from using "another" browser to access the websites you don't want them to go to.

Highlighted

Thanks Erik!

Highlighted
Solution

You can use Windows Defender Applikation Guard - so only approved websites can bu opened. All other websites are opened in a container raised Edge Browser and do not have access to the host machine.

Highlighted

Thank you!

Related Conversations
How to deal with pre installed iOS app
Koos Duijvenbode in Microsoft Intune on
0 Replies
Unable to get IE mode working through Intune
kblack1091 in Enterprise on
0 Replies
Enable ssh on a mac with intune
Lars86 in Microsoft Intune on
0 Replies
Intune offline grace period
rodbase in Microsoft Intune on
0 Replies
Device in Include and Exclude group
fatshark_2k in Microsoft Intune on
2 Replies