How to disable internet access on terminal server 2008 r2?

Question

firewall

There is a terminal server with white IP. There is no network equipment in front of him (not counting the provider).
You need to configure a policy to deny access to the Internet for users of this server.
At the same time, everything should be flexibly managed, if necessary, open-close access.
What do you advise?

Answer 1

If we are talking about access via HTTP / HTTPS, set up a proxy on the same server, and prohibit users from changing the settings of browsers and other HTTP consumers with policies.