Guest Accounts - Banning Internet access.

[Lando2]

Hi...

We are converting a novell network of over 15,000 users over to win2k shortly, there are a few issues that I've been asked to investigate.

We need guest accounts so anyone can access office apps without an authenticated username, but we dont want these people to have internet access, is there a trigger or policy available that turns off all internet access for certain users as they login. You know, something like the big `STOP` button on Zone Alarm. We still need these users to access the LAN tho, so unbinding IP or releasing it wont work.

P.s. I'm not totally clued up on Win2k server, I've done the basic MSC in it, but many of the advanced functions are all spanish to me, but I'm gonna report my findings back to someone who does know his stuff (but not this issue)

Answers on a postcard pls.....

 

[butchrecon]

I think you would need a IIS (Internet Information Sercever) or Proxy for this. If you have that many users and you want to control Internet access IIS is what you should use. Please let us (Tek-tips members) know if the solutions we provide are helpful to you. Not only do they help you but they may help others.


James Collins
Computer Hardware Engineer
A+, MCP

email: butchrecon@skyenet.net

 

[Lando2]

We aren't using IIS as such, all internet activities. proxies and gateways etc are controlled by unix boxes/cisco cats.

 

[butchrecon]

You should be able to control Internet access to users in Unix. Or am I mistaken? I am not too familiar with Unix. Please let us (Tek-tips members) know if the solutions we provide are helpful to you. Not only do they help you but they may help others.


James Collins
Computer Hardware Engineer
A+, MCP

email: butchrecon@skyenet.net

 

[CitrixEngineer]

Just disable guest access on whichever proxy server you're using - or create a new guest equivalent group, and deny them access to the proxy server (I guess you're using Squid/Apache, so this should be straightforward)

 

[victor22]

Hello.
Internet access depend much of client setup. If you don't want someone to access Internet, don't setup proxy and default gateway propertis on local computer. Another way is managing rights on gateway or proxy. It's don't wise to use PDC or Active Directory controller as Internet gateway.
Victor.