Limit Internet to certain users in Windows XP

[mprover]

Im managing a computer network in a small office. The owner would like to disable the internet for only certain users in windows XP . Any suggestions as to how to do this?

 

[imported_pak9rabid]

Probably the best way to go about doing this is configuring the network so that each computer has a static IP that cannot be changed by the normal user-level accounts and implementing a firewall that only allows IP traffic to be forwarded to/from the internet for specific IP addresses on the LAN. You can purchse a router/firewall that can do this, of if you have an old computer laying around and the proper knowledge, you can put 2 ethernet cards in it, install Linux, and set it up to be a router/firewall.

 

[EULA]

couldn't you just set up a security policy to restrict internet explorer?

 

[thegorx]

I don't know if disabling internet explorer is a good way to go about this
I think some programs use it even if they're not going online
then there is also document written in html that would need a browse to read them.

then if you configure windows to restrict internet access then there is always a way for users to get around that

prehaps you should put this in networking I'm not an expert

maybe you can restrict all internet then only thru a proxy could certain individuals access it.
but that's just an idea like I said I'm no expert

 

[mobilecommand]

Start - run - mmc
File - add/remove snap-in
add - highlight group policy - add - finish - close - ok

Expand user configuration - windows settings - internet explorer Maintenance - click on connection - double click proxy settings - add check mark to enable proxy settings and put in bogus ip address ie: 1.1.1.1

You must long in as each user to do this if this is a peer to peer network..

If the machines are on a domain then make a new security group called no internet. Add the users the the group that dont need internet access. Create a new policy and change the proxy settings to a bogus proxy server ie: 1.1.1.1 exit the mmc. On the security of the policy remove the all users group and add the no internet security group and make sure the apply group policy box is checked, apply then ok..

Create a second policy called full internet and do nothing, on the security of the policy make sure its "all users" apply group policy is checked..

When you look at policy on a ou group policy applys bottom up so you want the policys stacked like this

NO internet
Full internet

So anyone that is in the ou will apply full internet groups policy IE no proxy settings then as windows applys group policy going bottom up it will apply the no internet policy only to the users that are in the "no internet" group..

That should do it..

 

[mprover]

thanks mobilecommand, Ill try it monday and let you know