In my company almost every user has 3G mobile connection and many of them travel a lot.
To prevent expensive mobile charges I'm looking for a solution that would prevent particular program (Windows Updates, Dropbox, etc.) from using 3G/Mobile Broadband connection.
Ideally connection rules should be controlled globally (GPO, global admin portal or similar)
Any suggestions welcomed.
as and easy and dirty way could be to set up a local DNS server/forwarder with the dropbox, windows update, etc stuff set to localhost that they cannot access the internet at all. problem with that is for sure, that you cannot administrate it from remote.
if all internet connections go through the firewall, you could maybe introduce some specific forwarding rules depending on where the connections is coming from. extra dhcp range for all 3g connections if they're coming in on a different interface.
I don't think thats a solution, but somehow i couldn't add it as a comment.