Best way to lock down internet access

[MassiveJim]

The requirement is to block internet access from a particular machine, but still allow an RDP connection (over the internet)

What is the quickest/easiest way to do this ?

 

[bremen1874]

You might be able to use a variation on what's outlined here

https://thesysadminchannel.com/how-to-restrict-internet-access-using-group-policy-gpo/

 

[Quartz]

Block all ports - or as many as possible - on the firewall except for the RDP port.

Alternatively make Internet Explorer and MS Edge admin-only via permissions.

 

[labcoattech]

What is the reason behind blocking internet access?

 

[Hyburnate]

I'd probably just do it using the firewall.

 

[labcoattech]

Best option would be to block all internet access, then only all internal RDP connections which you can achieve by using an OpenVPN server.