SOLVED
Home

Control Website Access using Intune/EMS

%3CLINGO-SUB%20id%3D%22lingo-sub-225077%22%20slang%3D%22en-US%22%3EControl%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225077%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20to%20control%20website%20access%20(block%20some%20websites%20like%20gmail%20etc.)%20on%20managed%20computers%20using%20Intune%2Fconditional%20access%2FEMS%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20want%20to%20control%20it%20for%20roaming%20employees%2C%20so%20cannot%20do%20this%20with%20firewall%20and%20are%20cloud%20only%20company%20with%20no%20on%20premises%20AD%2Fproxy%2FGPO.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20looking%20at%20managed%20browser%2C%20not%20sure%20if%20it%20can%20solve%20the%20purpose.%20I%20am%20not%20sure%20if%3A%3C%2FP%3E%3CP%3E1.%20Managed%20browser%20will%20stop%20use%20of%20other%20browsers%20to%20open%20these%20websites%3F%3C%2FP%3E%3CP%3E2.%20It%20seems%20its%20not%20available%20for%20Windows%2010%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20inputs%20will%20be%20appreciated.%20Many%20thanks!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-225077%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EConditional%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eweb%20filtering%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-234171%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-234171%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-233994%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-233994%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20use%20Windows%20Defender%20Applikation%20Guard%20-%20so%20only%20approved%20websites%20can%20bu%20opened.%20All%20other%20websites%20are%20opened%20in%20a%20container%20raised%20Edge%20Browser%20and%20do%20not%20have%20access%20to%20the%20host%20machine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227081%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227081%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Erik!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-225778%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Website%20Access%20using%20Intune%2FEMS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-225778%22%20slang%3D%22en-US%22%3EDon't%20think%20this%20is%20something%20you%20can%20do.%20Conditional%20access%20can%20be%20used%20to%20manage%20access%20to%20resources%20you%20control%2C%20so%20that%20won't%20help%20for%20sure.%3CBR%20%2F%3EAlso%20don't%20think%20there%20is%20a%20real%20watertight%20solution%20to%20prevent%20people%20from%20using%20%22another%22%20browser%20to%20access%20the%20websites%20you%20don't%20want%20them%20to%20go%20to.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Highlighted
Vineet Arora
Contributor

Hi,

 

Is it possible to control website access (block some websites like gmail etc.) on managed computers using Intune/conditional access/EMS?

 

We want to control it for roaming employees, so cannot do this with firewall and are cloud only company with no on premises AD/proxy/GPO.

 

I was looking at managed browser, not sure if it can solve the purpose. I am not sure if:

1. Managed browser will stop use of other browsers to open these websites?

2. It seems its not available for Windows 10?

 

Any inputs will be appreciated. Many thanks!

 

4 Replies
Highlighted
Don't think this is something you can do. Conditional access can be used to manage access to resources you control, so that won't help for sure.
Also don't think there is a real watertight solution to prevent people from using "another" browser to access the websites you don't want them to go to.

Highlighted

Thanks Erik!

Highlighted
Solution

You can use Windows Defender Applikation Guard - so only approved websites can bu opened. All other websites are opened in a container raised Edge Browser and do not have access to the host machine.

Thank you!

Related Conversations
License / Config etc Groups
Stuart King in Microsoft Intune on
0 Replies
MacOS FileVault disk encryption management
Ritesh1265 in Microsoft Intune on
0 Replies
help needed on simple maths in Access
KellieJean-in-Newie in Access on
0 Replies
App Protection for new Office App for ios
Kevin Wheeler in Microsoft Intune on
3 Replies
The old extension store website need to be replaced
HotCakeX in Discussions on
10 Replies
MS Access
jmtreky in Access on
0 Replies