How to close mail on a LAPTOP?

Question

System administration

There is a laptop issued by the enterprise and often leaving its walls, and it uses 3Gk.
It is necessary that it would be possible to use only ONE mail from it, regardless of which network it is on.
The task is to implement foolproofing. No sensitive information is processed.
It is also pointless to delve into the subtleties, the boss wants, and that's it.
PS I will ask you to give a detailed answer. And if possible, a link to some instructions.

Answer 1

I suspect that the purpose of this action is to prevent information leakage from the service laptop, but then you need to block USB and printers. If the laptop is taken out of the stationary location, and the employee has intent, then most likely your procedures will not lead to anything. It's easier to pick up a laptop and give out a carrier pigeon.

Answer 2

No way. Technically, this is easy to do.

Answer 3

create an allow rule for the mail.ru site in the windows firewall and a deny rule for all other sites. try to go to mail.ru. according to the results, add mail.ru subdomains to the list of allowed sites in the firewall, without which the mail page does not work normally. prohibit work in the firewall on all other protocols and ports, except for 80 and 443 for the mail.ru site.

Answer 4

If the task is to exclude data leakage, then you need to remember that not only letters, but also USB, and DVD and even bluetooth are leakage paths. banned. VPN becomes in office. (This configuration is broken even by a complete lamer by inserting a USB whistle with 3G, which again leads to USB control, etc.)
If you can block the entire tyrnet, port 80/443 is banned in the Windows firewall, except for the server where you need to go.
But in general, the problem has no solution - more initial data is needed

Answer 5

we raise vpn automatically to the network. all traffic through vpn. we block all mails except for one. profit