Can you Lock Down Internet Access to your users on Win9x?

  • Thread starter Thread starter Jeff Rush
  • Start date Start date
J

Jeff Rush

Hi all,

I have a DC that is host to a mixed lot of systems. I know that on the 2K
and XP workstations I can use a policy to restrict them from hitting the
internet but how do I block my Win9X folks from doing this??

Thanks in advance,

Jeff
 
You really can't if they are smart enough to change their settings. You could try to
not giving them a default gateway or a bogus proxy but they will probably figure it
out. If possible you could block access at the firewall based on users ip address
which would need to be static or in a scope of denied ip addresses. --- Steve
 
I have a DC that is host to a mixed lot of systems. I know that on the 2K
and XP workstations I can use a policy to restrict them from hitting the
internet but how do I block my Win9X folks from doing this??
Click to expand...

Use policies on the Win9x systems. They work differently than 2k/XP user
and group policies, and they aren't as clean, but they do work. If I'm not
mistaken, Win9x system cannot use the AD policies even with the AD client
loaded, so you'd need an actual .pol file.

The best thing to do is grab yourself a Win9x system and play with the
Win9x policy editor locally until you get what you want (and without
causing some other problem.)

From: http://www.win2ktech.com/faq/faqs9x/win9xnetfaq.htm#win9xnet4

Can I enable Windows 9x machines to use Group policies?

You need to copy the file grouppol.dll from the Win9x installation CD to
the system folder of each of your Windows 9x machines. This folder should
be located under c:\windows\system. You also need to apply the changes in
the grouppol.reg file to each machine. This file is found in the same
directory as grouppol.dll on the Win9x CD). This needs to be run by
entering C:\> regedit grouppol.reg. When you run this file it will add the
following entries to the registry. Should you have any problems, check the
keys to ensure they actually exist

HKEY_LOCAL_MACHINE\Network\Logon
Value name (STRING): PolicyHandler
Value data: GROUPPOL.DLL, ProcessPolicies

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSNP32\NetworkProvider
Value name (STRING): GroupFcn
Value data: GROUPPOL.DLL, NTGetUserGroups

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NWNP32\NetworkProvider
Value name (STRING): GroupFcn
Value data: GROUPPOL.DLL, NWGetUserGroups

You could complete this task on multiple machines by adding the required
command lines to a logon script.
 
Back
Top