Restricting Internet Access

[BC]

Hi

Wonder if someone can help. I'm currently running a
Windows 2000 AD in mixed mode. We have just installed an
ADSL connection and certain PCs can gain internet access
by using the ADSL router IP as their default gateway.
Problem is that anyone who logs on to that PC can also
gain access to internet resources. I need to be able to
control internet access on a per user basis. My firewall
doesn't allow this (by IP only). I'm running a mixture of
2000 Pro / NT 4.0 clients. Has anyone any ideas? I was
thinking of simply removing gateway settings from NT 4
workstations and limiting the gateway setting to 2000 Pro
clients. Then, setting up a Non-Internet Access GPO
(maybe something that sets an invalid proxy setting?) for
users without internet access and an Internet Access GPO
(that doesn't include the dummy proxy setting) for users
with internet access. Seems a little clumsy to me. Can
anyone help me with a better idea please? We're using
static IP, not DHCP.

Thanks

BC

 

[Marina Roos]

I think you can only control internet access on a per user basis with proxy
software, like ISA 2000.

Marina