Help with a silly situation. . .

[episodic]

I'm working with this set of conditions.

25 laptops all set up as admin
By policy I can't assign user accounts (silly I know)
Non-computer people use these laptops - you know the kind that install spyware bars
I can't install any software
These people are heavily supervised, so this is to stop the occasional diversion.
We only want them to be able to use one internet site.


What is the easiest way in windows with no other programs to only let them go to one site and one site only, and maybe a 2nd or 3rd site as needed later. In other words we only want them to go where we specifically allow them to go and noowhere else.

All the conditions are not my idea, just what I have to work with.

Thanks for ideas. . .

 

[n0cmonkey]

A firewall in a central location.

 

[episodic]

Originally posted by: n0cmonkey
A firewall in a central location.

I don't have access to anything above the laptop. I'm in a weird situation - what I gave you is all the conditions and all I have access to.

 

[episodic]

Anyone else got ideas, is it possible to write a host file that allows one site but not any others. . .

 

[nweaver]

default gateway removed,

route add command to add a route to that server, and if you need name resolution, the dns servers or hosts file.

 

[birdpup]

[no network knowledge]
Maybe the security and trusted sites can be configured in IE internet options, on each machine.
[/no network knowledge]

 

[episodic]

Originally posted by: nweaver
default gateway removed,

route add command to add a route to that server, and if you need name resolution, the dns servers or hosts file.

Ok, I was playing with this and added a static route to yahoo that is persistant.

I entered this:

route ADD 68.142.197.88 MASK 255.255.255.0 192.168.2.1 IF 2

I wend and turned off DHCP and the IP address of my interface defaulted to 0.0.0.0 - then I could go to the browser http://68.142.197.88/ and yahoo came up.

However, I figured out quickly that I could not browse anywhere but yahoo's first page. Anytime I clicked on something, it would not let me go.

SO

I figured I needed to do this:

route ADD 68.142.197.* MASK 255.255.255.0 192.168.2.1 IF 2

This however failed and told me I did not have the mask right.

So what is the solution that will allow persons to browse under a domain?

So say if I wanted to restrict persons to slashdot only - how would I do it while leaving slashdot itself functional?

 

[InlineFive]

I doubt there is much you can do if they have Administrator priveleges.

 

[episodic]

I've got admin on the laptops


I've got the route thing to work, I'm just missing something as the post described above. . .

I need to know how to wildcard a site properly I guess so that I can browse within the site. . .

 

[episodic]

I figured it out!

nweaver for elite. . .