Re: Restricting internet access completely to users/groups

Realistically you can not restrict an administrator account as
administrators that have the skill and determination can undo restrictions
on their account. There is a way to prevent access through Internet Explorer
by configuring IE for that user account to have use a bogus proxy server
[tools/internet options/connections/lan settings] but that would work to
restrict only IE and not alternate web browser or other applications that
can access the internet for chat, file sharing, FTP, etc and the user that
is administrator could probably figure out how to undo the bogus proxy
settings. Even using PortsLock would probably not restrict an administrator
as they could simply disable and stop that service. The only effective way I
know how to restrict such a user would be to use a firewall that can be
configured to have firewall rules based on user/groups such as ISA 2004 but
that is not something that would be used in a home environment normally due
to cost and complexity. Though not recommended to use with administrator
accounts you may want to look at the free Shared Computer Toolkit form
Microsoft. --- Steve


http://www.microsoft.com/windowsxp/sharedaccess/default.mspx --- Shared
Computer Toolkit

"eclipsed" <eclipsed@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9EC030FD-C7A1-40FE-B48F-A2FAD9AB723D@xxxxxxxxxxxxxxxx
is there a way to do this with in windows? (so i wouldn't have to fork out
$50 US)
i'm not sure what information to give on my setup, but here goes: I've xp
pro, 2 administrator accounts and a limited account. i'd like to restrict
internet access to an administator account. to make it so this
administrator
cannot change the restriction, i would use another admin account to manage
the entire system.
"Steven L Umbach" wrote:

You don't give much information of your setup but to restrict one or more
users on the same computer can be done with personal firewalls that have
different rules based on user and of course the user must not be a power
user or administrator as they could probably just reconfigure the
firewall
or disable the service. PortsLock is such a personal firewall. If the
user
uses a dedicated computer you could configure the perimeter firewall to
not
allow his computer's IP address access to the internet and of course
again
you want to make sure he can not change the computer's IP address. ---
Steve

http://www.portslock.com/ --- PortsLock

"eclipsed" <eclipsed@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:64EA8381-83E5-4464-A3D1-CF917CFE6886@xxxxxxxxxxxxxxxx
is it possible in windows xp professional to completely eliminate
internet
access. for a certain user (lets call him 'no net') i would like it to
be
the
equivalent as if i unplugged the Ethernet cable. i want no access at
all.
none. thanks





.

Relevant Pages

  • Re: Firewall and group policy mess !
    ... When I click the firewall option to turn it on as prompted by the security ... netowrk administrator is using Group Policy to control these settings. ... an 'administrator' account. ... up with a limited user account so that you couldn't accidentally ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: No lockout policy... why not?
    ... authentication token and PIN, you can't even get to a password prompt to ... Seems Anna was napping in class when the subject of Administrator ... Administrator account is either a workable solution or will do more ... Focusing on the firewall isn't all that should be done. ...
    (microsoft.public.windows.server.sbs)
  • Re: seeing another computer on a LAN
    ... Both machines are XP Pro ... so I'm hoping to use Administrator on both. ... account and all will be well, but I'm concerned re whether the Administrator ... caused by 1) a misconfigured firewall; ...
    (microsoft.public.windowsxp.network_web)
  • Re: hacking from Terminal services or some other means
    ... If you insist on staying with a personal firewall, ... I would still enable an account lockout policy and change ... the name of the administrator account. ... > Our mail server is running Windows 2000 server. ...
    (microsoft.public.win2000.security)
  • Re: Securing against an internet based intrusion
    ... I don't know whether account lockout will do anything in XP, ... modem/router you use - even if you use the XP firewall as well. ... We have a single administrator, changed the name to something obscure ... wireless connected laptop is also turned off. ...
    (microsoft.public.windowsxp.security_admin)