Block Complete Internet Access For One User ????

[lodown]

Hi

I have one computer with 3 accounts, Admin, one that has net access and the other one i want to block all incoming and outgoing connections. how would i do this? i have a usb cable modem, my computer isn't networked to any other computers, and i am running norton antivirus and norton firewall. is their a setting i can make in any of these that will completely block the net access to this user. another thing i have been suggested, but dont know how to do is to disbale the usb port for that user????

thanks if you can help me, i am really confused ?? :-~

matthew

 

[PulsaMatt]

well you could disable the USB port through the device manager, but I am not sure that would fix your problem because you would actually need a new hardware profile to make it user specific (meaning you would have a menu during start-up that would allow you to pick either a USB enabled hardware profile, or one wth no USB enabled).

How ingenuitive of a user are you planning on blocking out. If yer talking about a little kid, you could hide a fake IP address in the proxy settings under "internet options" ... that would disable net access ... then it would probably be best to change the security on the non-internet profile to as low as possible, then they wouldnt have access privledges to change the proxy setting, of course they couldnt install software.

Hope that helps,
Matt Laski
Sysadmin, Pulsafeeder Inc.
Dell Inspiron 7500
466 MHz Celeron, 384 MB RAM, 26 GB on 2 HDDs

 

[lodown]

the main reason is to stop hackers deleting my files, the other accounts can only write to one drive, but this account can right to both hard drives. could you explain to me how to set up that thing with the usb port if that is the best solution?

thanks for your help

matthew

 

[MattWray]

You could create a harware profile thru the system properties box. Select harware then hardware profiles. Name it and click OK. Reboot and upon boot you will see your profiles. Almost forgot you will probably want to rename the profile1 to something else to remember. Anyways, boot to the new profile and disable the USB thru device manager. Whenever you boot to that profile USB will be disabled, but everything else should remain the same. But you will have to reboot to change profiles. You could also try

http://www.zonealarm.com

There is a free firewall program there, I use it at home. It is easily configured, and has a STOP button that instantly blocks all internet traffic, in or out..
Hope that can help... Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[lodown]

thanks, i'll give it a go

 

[lodown]

hi
thanks for your help, i have it set up perfectly now, once again thanks

matthew

 

[HARSHMAN]

The easiest way to block access is to go to the exe. file in explorer. Next, right mouse click on the file and go to the security tab. Next add the individuals name to the security list and for that person only select the DENY box across from full control. This will lock them out of any application that you want.

HMAN

 

[Guest_imported]

Well Disabling the Explorer.exe is a nice trick but if you goto my computer and type the URL in the Address box you still can access the internet! That may work for the little kids but the computer teenager "GEEK" will still surf the internet. J4ck3L

 

[Jasen]

er.. if the goal is to stop hackers from getting IN on that account and deleting stuff, blocking that user's ability to get OUT on the internet will not help, special hardware profile or not. Go to your local security policy manager, to "user rights assignments" and alter the user list under "Access this computer from the network" to start with. A good firewall and antivirus should be enough protection from the outside anyway though. Remember, you're unique... just like everyone else.

 

[MattWray]

If you would read the start of the thread, you will see the goal was to block out kids from going out to the net... Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[Jasen]

"the main reason is to stop hackers deleting my files,"

his kids are hackers I take it? Remember, you're unique... just like everyone else.

 

[MattWray]

My bad. Matt Wray
CCNA, MCP
mwray77518@yahoo.com