Re: how to restrict limited user only visiting several websites



The best solution is to use a firewall like Microsoft ISA 2004 but my guess
is that is not a possibility in your or most users cases.

What may work is to logon as the limited account and then configure Internet
Explorer to use a bogus proxy server for that user such as 127.0.0.1 and
then enter the websites you do not want to be blocked by the bogus proxy
server in the "do not use proxy server for addresses beginning with". Right
click exceptions and select what's this to get the built in help for that
option. You go to tools\internet options\connections - lan settings to set
up proxy server settings. Note that this will ONLY work for Internet
Explorer but a locked down user account should not be able to install third
party browser and most other internet applications and a software firewall
such as Zone Alarm could help enforce that with application based rules.

If you decide to try the above you certainly will want to make sure that the
user can not access the proxy settings. This can be done with local Group
Policy for XP Pro [gpedit.msc and go to user configuration\administrative
templates\Windows Components\Internet Explorer\internet control panel-
disable the connections page]though such settings by default will apply to
all local users that logon to the computer. Otherwise consider the free
Shared Computer Tookit from Microsoft that can lockdown users with many
Group Policy like restrictions without affecting other users and can also be
used on XP Home. --- Steve

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit. Requires SP2

<Asmith333@xxxxxxxxx> wrote in message
news:1151807642.424408.72670@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I've been reading here alot and decided to post.
Windows XP SP2, the administrator account want to restrict limited
account only visiting several dedicated websites, and forbidden the
limited account visit all the rest websites!
My ideal is that disable quering DNC server, and mapping the IP
addresses to host names only which I allow the limited account to
visit......
But the drawback is that the limited account user can input the IP
address directly in browser!
Maybe there have other methods to accomplish the hard work!

__
Ash



.



Relevant Pages

  • Re: Limited accounts in WinXP cannot browse properly
    ... >a minute or a little more) for the explorer to start working. ... and if I turn it back to a limited account it happens again. ... >I have five computers here and I have the same issue on two of them. ... Click on the LAN Settings button. ...
    (microsoft.public.windowsxp.network_web)
  • Re: User accounts (How to import mail accounts and settings)
    ... Probably the easiest way is to log on as admin, and run the FAST wizard to ... Save settings and data with the Files and Settings Transfer Wizard (FAST ... I would like to import those same settings to my limited account. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Administrator logon
    ... > How does the administrator log on to change settings in a limited account? ... If they are system-wide settings, then you use the administrator ...
    (microsoft.public.windowsxp.security_admin)
  • user profile
    ... I seem to remember someway to have a user, copy his/her settings into a new ... then rename it or say make it a limited account for various reasons ...
    (microsoft.public.windowsxp.general)