Restricting internet access completely to users/groups

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

is it possible in windows xp professional to completely eliminate internet
access. for a certain user (lets call him 'no net') i would like it to be the
equivalent as if i unplugged the Ethernet cable. i want no access at all.
none. thanks
 
Microsoft Shared Computer Toolkit for Windows XP
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------­----------------

:

| is it possible in windows xp professional to completely eliminate internet
| access. for a certain user (lets call him 'no net') i would like it to be the
| equivalent as if i unplugged the Ethernet cable. i want no access at all.
| none. thanks
 
You don't give much information of your setup but to restrict one or more
users on the same computer can be done with personal firewalls that have
different rules based on user and of course the user must not be a power
user or administrator as they could probably just reconfigure the firewall
or disable the service. PortsLock is such a personal firewall. If the user
uses a dedicated computer you could configure the perimeter firewall to not
allow his computer's IP address access to the internet and of course again
you want to make sure he can not change the computer's IP address. ---
Steve

http://www.portslock.com/ --- PortsLock
 
is there a way to do this with in windows? (so i wouldn't have to fork out
$50 US)
i'm not sure what information to give on my setup, but here goes: I've xp
pro, 2 administrator accounts and a limited account. i'd like to restrict
internet access to an administator account. to make it so this administrator
cannot change the restriction, i would use another admin account to manage
the entire system.
 
Realistically you can not restrict an administrator account as
administrators that have the skill and determination can undo restrictions
on their account. There is a way to prevent access through Internet Explorer
by configuring IE for that user account to have use a bogus proxy server
[tools/internet options/connections/lan settings] but that would work to
restrict only IE and not alternate web browser or other applications that
can access the internet for chat, file sharing, FTP, etc and the user that
is administrator could probably figure out how to undo the bogus proxy
settings. Even using PortsLock would probably not restrict an administrator
as they could simply disable and stop that service. The only effective way I
know how to restrict such a user would be to use a firewall that can be
configured to have firewall rules based on user/groups such as ISA 2004 but
that is not something that would be used in a home environment normally due
to cost and complexity. Though not recommended to use with administrator
accounts you may want to look at the free Shared Computer Toolkit form
Microsoft. --- Steve


http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit
 
Back
Top