I have a Small Office Network Connected to a Server running windows server 2016. The Server functions as DNS, DHCP Server, Domain Controller and Gateway( Two NICS, One lan connection & one WAN connection) I want to restrict Internet Access of Client Computers joined to the domain to a specific app(Google Chrome), Windows Update using WSUS.
I want the LAN access to work freely.
Would love some suggestion on how should I go about doing this?