The accounts PC is the worst place for open browsing: it touches the bank, tax portals and the company's money. Locking it to four or five work sites is the single cheapest security upgrade an office can make.
✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 7 minute read
🎥 Watch the full video — Website Filter Pro setup and allow mode, step by step
A billing PC has a fixed job: raise invoices, file GST returns, pay and receive money, and answer mail. It does not need news, social media or random software downloads — and every unnecessary site it can open is a chance for a fake bank page or a poisoned download to reach the one machine that must never be compromised. The allowlist pattern fits perfectly here: allow the bank, the GST portal, the income tax portal and webmail — block the entire rest of the internet. This page works through the pattern end to end, using the Website Filter Pro allow mode from the video.
A typical billing PC allowlist
✔ ALLOWED netbanking (your bank's official domain)
✔ ALLOWED gst.gov.in
✔ ALLOWED incometax.gov.in
✔ ALLOWED mail.google.com (or your webmail)
⛔ BLOCKED everything else, including search and social
Example list for an Indian accounts desk. Your bank's real domain replaces the first line — type it from the bank's own page, never from a search ad.
1
Write the Exact List for an Accounts Desk
Do not build the list from memory at the keyboard. Open each service the way the accountant does and copy the real domains.
Bank: the netbanking domain printed on the bank's official site or your cheque book — never a look-alike from a search result
GST:gst.gov.in — returns, payments and the ledger all live here
Income tax:incometax.gov.in for TDS and return filing
Email: your webmail domain, for example mail.google.com or your company mail portal
Accounting extras: any government or supplier portal the desk genuinely uses weekly — and nothing that is merely nice to have
2
Apply the List in Allow Mode
Use the same Website Filter Pro allow mode as the core guide — on this PC the list is the whole point, so enter it carefully.
Sign in as administrator and open Website Filter Pro
Choose allow only selected websites mode
Add the approved domains one per line, then apply and save
Restart the browser and test from the accountant's standard account, not the admin account
3
Test the Full Work Cycle, Not Just the Home Pages
Home pages loading proves almost nothing. A billing PC passes its test when the complete money workflows work.
Log in to netbanking and open the account statement page — login flows often hop to a second domain
On the GST portal, open the dashboard and a return page, not just the front page
Send and receive one test email with an attachment — mail portals load attachments from helper domains
If a step fails, a hidden helper domain is missing: note the exact step that failed before adding anything
4
Handle the Two Weekly Exceptions in Advance
Every office hits the same two exceptions. Deciding the answer now stops the allowlist being switched off in a panic later.
A new government or bank page appears: the admin adds the verified domain — a five-minute job, done once, properly
An auditor or CA needs a site: the admin temporarily adds it and removes it after the visit
Keep a small notebook beside the PC: date, site added, who approved. This log is what makes the lockdown auditable instead of arbitrary
Never solve an exception by turning the whole filter off — that is how temporary exceptions become permanent open browsing
🔴 One warning that belongs on every billing PC: the allowlist stops casual browsing, but the bank domain must be the genuine one. If the approved list itself contains a misspelled bank domain, the filter will faithfully allow a fake site every day. Verify the domain from the bank's own documents once, carefully.
🎥 Watch the Full Video Guide
The complete Website Filter Pro walkthrough — download, allow mode and testing — is shown live in the video.
Will the allowlist break Tally or other desktop billing software?
No. The filter controls websites in the browser; desktop software like Tally keeps working. If the accounting software itself needs an online service — licence activation or a data sync portal — add that service's domain to the allowed list as well.
The bank site opens but payment fails midway. What is missing?
Payment steps often redirect to a payment gateway or the bank's OTP domain, which is a different address from the netbanking home page. Note the address shown during the failing step and ask the admin to add that exact domain — it is the hidden domains problem, and it is normal.
Should the accountant have the admin password for urgent work?
No — that quietly removes the whole protection. Urgent additions go through whoever holds the admin password. In a small office that is the owner, and adding a domain takes a few minutes; the password itself should not travel.
This guide is based on the Technical Anshu video on allowing only selected websites • Stuck on a step? Ask in the video comments — answers happen there 🙏