• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Small Business Server 2003

N

Netopia

Diamond Member
Does anyone know if there is an easy way in SBS2003 to restrict certain computers from being able to access the web? The server is acting as both DHCP server and gateway.

Thanks,

Joe
 
As InlineFive mentioned, with ISA 2004, denying Internet access is a mouseclick or two away.

Otherwise, you'll have to resort to "conventional" techniques. These have been discussed several times in the AnandTech Networking Forum:
Removing Default Gateway from each PC.
Pointing browsers to a non-existant Web Proxy server.
Some other tricks that I don't recall right now, but I'm sure some other folks will list.
 
I do not believe that it's premium (no sql server).

Since this is all DHCP, I'm not quite sure how I could remove the gateway since it's assigned by the server.

I will have to look into ISA 2004, but I have searched both this forum and the networking forum and have found nothing on this exact topic. That being the case, if anyone wanted to have mercy on me and just let me in on the secret of blocking access to certain machines, I would be very grateful.

Joe
 
You have to block access either at the client or server, and you can either do it via fancy networking or via software (proxy usually)

So, setup a proxy (squid isn't too bad, especially on smoothwall. Not sure if you can smoothwall a non gateway type situation) and block access there, or figure out how to get windows to block certain IP's at it's gateway (cinche in linux, but windows lacks the robust networking tools like IPTables)
 
manually configure TCP and put in a dummy gateway? (its what I do on few machines the don't need internet access.
 
Originally posted by: gwag
manually configure TCP and put in a dummy gateway? (its what I do on few machines the don't need internet access.
Click to expand...

Yeah, I might end up doing that. I set up accounts and such for this company remotely, and they have some other guy deal with the client machines. I'm not sure he's knowledgeable enough to do anything, which is why I was hoping I could configure it at the sever.

Thanks for the suggestions,

Joe

 
Without ISA, this is one case where Windows lags far behind Linux. Even with ISA, I think they lag, as the linux tools are mature, very versitale, and easy (imho). I'm not real fond of ISA though.
 
Active Directory group policy. You can lock machines out with zone security settings or you can configure the proxy for the machines you want to lock out there. You can also make it so that users can not undo your settings.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top