Disabling shared Internet access for local user but allowing for others

[ZamekPetr]

I have a desktop PC with two LAN adapters. One of them will be
connected to modem into Internet (by cable TV), the other LAN adapter
is used to interconnection to notebook via cross cable. On the desktop
it is WinXP Prof SP2, on the notebook is WinXP Home SP2 installed. I
would like to configure shared Internet connection on the desktop PC to
enable both of them the Internet access. The desktop is frequently used
as game PC (locally used games without need of Internet connection).
For this purpose there is build a user account with administrator
privileges (user="GAME") there (many games need it for playing and to
enable of installing new programs). For web browsing there is another
account which is not member of admin group (user="INET").
How to avoid the Internet access for the administrator-privileged user
GAME and retain it for the connected notebook in the same time?
(Assuming that the gaming user doesn't want to break this
arrangement. As member of admin group could, but will be not.)
For example: login script disabling the LAN-adapter for Inet is not
suitable - this does not preserve the Inet for the NB in that time.
I have an idea: By GP for user GAME to modify the proxy-setting to
false IP-address. But will be the Internet connection on the connected
NB working? And further: This setting is disabling IE, but some
programs have its own proxy-setting and so will not be disabled by this
way. I am looking for a possibility to disallow the Internet access for
all processes running under specified account.
Thanks for some idea.
Petr Zámek

 

[Steven L Umbach]

To do it right requires something like ISA 2004 as a firewall but that is
very expensive [$1500 or so I believe] and requires that it be installed on
Windows server operating system. Beyond that I would look at using something
like PortsLock which is a personal firewall that can have different firewall
settings per user. Also I would recommend that you forget using Internet
Connection Sharing and get an "internet router" or firewall device to
protect your network. Internet routers are dirt cheap [at least in USA] -
usually you can find one on sale for less than the cost of a month's
internet service. --- Steve

http://www.newegg.com/Product/Product.asp?Item=N82E16833127143 ---
internet router for $15.99 after rebates. If you don't need wireless then
just disable the wireless fuction in it and maybe some day you will want to
use wireless.
http://www.portslock.com/ --- PortsLock

I have a desktop PC with two LAN adapters. One of them will be
connected to modem into Internet (by cable TV), the other LAN adapter
is used to interconnection to notebook via cross cable. On the desktop
it is WinXP Prof SP2, on the notebook is WinXP Home SP2 installed. I
would like to configure shared Internet connection on the desktop PC to
enable both of them the Internet access. The desktop is frequently used
as game PC (locally used games without need of Internet connection).
For this purpose there is build a user account with administrator
privileges (user="GAME") there (many games need it for playing and to
enable of installing new programs). For web browsing there is another
account which is not member of admin group (user="INET").
How to avoid the Internet access for the administrator-privileged user
GAME and retain it for the connected notebook in the same time?
(Assuming that the gaming user doesn't want to break this
arrangement. As member of admin group could, but will be not.)
For example: login script disabling the LAN-adapter for Inet is not
suitable - this does not preserve the Inet for the NB in that time.
I have an idea: By GP for user GAME to modify the proxy-setting to
false IP-address. But will be the Internet connection on the connected
NB working? And further: This setting is disabling IE, but some
programs have its own proxy-setting and so will not be disabled by this
way. I am looking for a possibility to disallow the Internet access for
all processes running under specified account.
Thanks for some idea.
Petr Zámek

 

[ZamekPetr]

Thank you for your answer. I'll try to manage it by some free proxy SW
with user authentication.
P. Zámek