Disable internet connection

[EvilCabal]

Hello,

is there a way to block the internet access to some users?

Thanx.

 

[jcneil1]

EvilCabal,
You must know that question is obviously un-answerable without telling us what your network is running- What network os, client os, do you run Active Directory, what type of firewall, etc...

 

[ChicagoTechNet]

quoted from

http://www.ChicagoTech.net

Restrict certain computers on a network accessing the Internet

1. Create a batch file to re-setup TCP/IP.
2. Edit registry LAN settings depending on who logon.
3. If you have a router, you may be able to restrict the Internet access.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[EvilCabal]

Sorry about the lack of information, I thought the anwser might be as simple as a check box or something like that in windows 2000 options.

Actually I'm a programmer, not a network admin, so I'll do my best to explain the setup.

The network server runs windows 2000 server, internet access goes through a router (DLink 704p). All the IP adresses are dynamic.

The best solution I found so far is to write a program that modify the right registry keys. But this is station dependant rather than user dependant so it's not ideal.

If you need any other info tell me.

ChicagoTechNet, How do I do this :
1. Create a batch file to re-setup TCP/IP.
2. Edit registry LAN settings depending on who logon.


Thanks for the help

 

[JGillespie]

we just use a gpo linked to an nt security group that sets a dummy proxy server address and denies the user access to changing ie settings.

the advantage is users can be moved in and out of the nt security group without affecting any other group policy stuff.

Jamie Gillespie
j-gillespie@s-cheshire.ac.uk

 

[EvilCabal]

As I said before, I'm not a network administrator so can you please tell me what a gpo is and how it works.

 

[jcneil1]

Do you know if you have a domain or a workgroup?

 

[EvilCabal]

A workgroup.

 

[iLinkTech]

I have a similar question - my W2K domain has DNS, DHCP, WINS, etc.. on all W2K / XP clients (no 95, 98, etc).

How can I keep someone from bringing in a laptop that is not part of the domain, connecting to the network, getting an IP address, and then connecting to the Internet? I have a Firebox 500 that I'm getting ready to hook up but I don't like the "authentication" method that they offer (have to logon and keep a java applet open?).

Any suggestions? Thanks