how to stop a user's internet access???

[Bubba Gump]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install items
like Instant Messenger. I'm assuming I need to change their account to
"restricted users" but what about blocking internet access?

Thanks!

 

[Alias~-]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install items
like Instant Messenger. I'm assuming I need to change their account to
"restricted users" but what about blocking internet access?

Thanks!

Unplug the computer from the Net, of course.

Alias

 

[John John]

Yank the internet cable from the machine! No more problems...

John

 

[Tom Willett]

This could be done in the University's firewall, blocking access to the
internet from the specific computer(s).

Or, Perhaps:

1: Block access in the content advisor:
http://support.microsoft.com/default.aspx?scid=kb;en-us;310401&sd=tech

2. Then, install the Microsoft Shared Computer Tool Kit to take away their
ability to make changes to the system:

http://www.microsoft.com/windowsxp/sharedaccess/default.mspx

Tom
| ok, I've got a silly question. I work for a university and we have
| student workers. We have a student worker computer that they do
| legitimate work on. However, we've caught them spending a lot of time
| instant messaging as well as lurking around myspace.com. How can I
| EASILY block internet access while still allowing network access?
|
| Currently their local accounts are set as local administrators which
| obviously is part of the problem b/c it's allowing them to install items
| like Instant Messenger. I'm assuming I need to change their account to
| "restricted users" but what about blocking internet access?
|
| Thanks!

 

[DatabaseBen]

it is unclear if the problem you are having is a personal one or the
problem violates the official policy on the use of computer equipment;
keeping in mind that if the computer system was federally funded, then there
may be some other guidelines which permit the way
computers are being used now....

why was giving a free pass into the computer system as
an administrator considered in the first place.....?

one problem is that your network people are probably following a policy

 

[Bubba Gump]

The problem is that our student workers are spending too much time
screwing off on the internet so our department Director has asked me,
since I maintain all of our network access and computers, to disable the
internet from the student worker PC.

However, I don't want to completely disable it from anyone as I still
want to be able to personally, as an administrator, go in and do windows
updates or anything else on the internet I so desire under my login. I
also want them to still have network access as they need access to files
we have stored on our server and to be able to print to network printers.

What I'm getting at is I want to prevent internet access for these 2
student worker logins but not prevent network access.

Thanks!
Buster

 

[HeyBub]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install
items like Instant Messenger. I'm assuming I need to change their
account to "restricted users" but what about blocking internet access?

From a Google search (block+internet+access+xp)

"...go to Run and type in gpedit.msc (GP stands for group policy) ,,then go
to " user configuration" / Administrative Template / then you can expand
"Desktop" and "Control Panel" and "Network" and "system",,, everyone of
those option have all kind of policy have disable /enable option which will
allow you to make changes into behavior on the operating system. Please
remember that if you are going to make the changes, you HAVE to be logged
into that specific account to do that. You can't make the changes from your
account into another. Also remember that gpedit.msc is very powerful tool so
don't make changes where it would lock you /account out."

 

[DatabaseBen]

hmm, it sounds like you have a "real jar of sour pickles"...

but i don't think that altering the computer will alter the students
behavior.
whats next, altering books, etc.... Is it a question of protecting the
computer system
or trying to help the students? Are the students failing or are the
machines in some
kind of emotional pain?

I think we all agree that the internet can be addictive to people,
especially with
places like myspace, porn, etc.... Maybe your Director and with the help
of the phsycology department can attempt to analyze the situation of the
interaction
between your students(customers), machines(publically funded equip) and the
data (freedom of
information).

I suggest a challenge for the Director to have the pcs moved into a
controlled enviroment and begin the study.
Or simply provide counseling to the students. I assume that the students
are aware of the concerns by the
Director......

Altering the behavior of the persons and not the machine should be the
goal...

 

[John John]

From a Google search (block+internet+access+xp)

"...go to Run and type in gpedit.msc (GP stands for group policy) ,,then go
to " user configuration" / Administrative Template / then you can expand
"Desktop" and "Control Panel" and "Network" and "system",,, everyone of
those option have all kind of policy have disable /enable option which will
allow you to make changes into behavior on the operating system. Please
remember that if you are going to make the changes, you HAVE to be logged
into that specific account to do that. You can't make the changes from your
account into another. Also remember that gpedit.msc is very powerful tool so
don't make changes where it would lock you /account out."

You have to be logged on as an Administrator to edit/add/modify Group
Policy Objects (not be logged into that (user's) specific account). The
suggestion is good but the problem is that being given administrative
privileges the student workers can easily go and change the policy or
for that matter any other local machine attempts to block access to the
internet. The users need to be reigned in and have their admin
privileges revoked. Other than that the only way to stop their access
to the internet is to physically remove the machine from the internet or
as another poster suggested have the firewall block it or block it from
the router access point.

John

 

[Bubba Gump]

man, this wasn't meant to be a psychology question. we just want our
workers to do what they're at their job to do, work. Keep in mind these
are kids, children, not professionals. if given the option of screwing
off chatting with friends online or doing actual work, what do you think
they'll choose? They'll choose chatting with friends. Remove that option
and then either they sit there with their thumbs up their backside or
they work.

Therefore, I'm trying to do the job I was given, disabling their
internet access, and not have to go back to my director and tell her how
to do her job differently.

Now, if anyone can seriously tell me how to do what i asked, I would
appreciate the advice.

Thanks!

 

[Bubba Gump]

John, I'm going to change their accounts on the system from
administrators group to "restricted users". I don't have access to the
campus access point so I'm trying to do this interoffice.

I'm playing with ZoneAlarm pro to see if I can get it to do what I want
but so far it's not going smoothly. i can get it to block internet
access perfectly but it doesn't have an option to require a password to
re-enable internet access. Go figure!

Thanks!
Buster

 

[John John]

You're welcome. I don't know much about Zone Alarm but it seems odd
that it wouldn't have any password protection of sort on the
configuration settings. I found this at the ZA site:

Go to Overview -> Preferences -> Set Password.

http://forum.zonelabs.org/zonelabs/search?q=set+password

John

 

[Seahawk60B]

First, as you have done already, I would certainly ensure that they
don't have administrative privileges.

Second, there are a number of ways to mess up internet communications
without disrupting the LAN. Most of my suggestions would involve
changing settings, then ensuring that their accounts don't have the
permissions required to reset them, but then when you need Internet
access as Administrator you can re-enable it as necessary.

For example, you could change the connection settings in IE to use a
non-existent proxy server, then disable the connection settings tab for
your student worker accounts.

If everything they need to get to is on the same subnet, you could also
remove the default gateway address from the network card tcp/ip
settings, and they would not be able to communicate with any computer
not on the same subnet.

You might want to look at some of the settings you can control/lock
down in gpedit.msc to discourage their nonproductivity...

 

[DatabaseBen]

sorry, i thought children
were considered to be under the age of 18.

i wouldn't want to attend a university that
has a dictator for a director or considers its students
that pay your salaries for attending, as children.

You say you are only doing what you have been told to do.
But is it within the codes of ethics? I don't think so especially
coming from an institution that receives public funding, receives
money from the students, and a director who rather dictate personal
policy rather than discussing the issues with the students...

Next thing you will be ordered to do is to
go to the library and remove the art books
because the students are spending too much time
looking at the nude masterpieces.

as long as the "children" don't recognize the conspiracy;
as long as you have 100% over the control
of the network (seems to me that you do not);
and as long as you are acting within the established
guidelines and not those just conveniently made but a director
who probably spends too much time drinking coffee;
and as long as a federal judge doesn't
consider the alterations as a violation,

then you are "a"-"ok"....

 

[Pop`]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install
items like Instant Messenger. I'm assuming I need to change their
account to "restricted users" but what about blocking internet access?

Thanks!

IMO, add the nefarious sites to the HOSTS file and put the same HOSTS file
on any machine you wish it to work on.

HTH
Pop`

 

[Bruce Chambers]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Simply configure the LAN's Internet Proxy server to deny that
particular machine, by IP address.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

 

[Keith Miller MVP]

Student WORKERS, Ben....

Is it stifling their spirits too much to expect them to work when they're at their job???

These do not sound like public-access machines in the library.

 

[DatabaseBen]

you are correct with what they are expected to do.

but, what i saw is that the network administrator was being left out of the
loop by the
director, likely because the director couldnt get the cooperation of
the network administrator or maybe some policy was in the way.

Then the director wanted the student worker
to alter the integrity of the system and regulate the other student workers.
Since the student didn't know how to do it and for whatever reason
couldn't send an email to their network administrator; decided to ask
the newsgroup.

Thank goodness for newsgroups and for the helpful people.
It was my intent not to provide the quick fix and instead
provided something that would resonate for the longer term..

Didnt mean to come down hard on the student, since
the problem of behaviors is with the leadership and the
use of innocent students to do their dirty work....

Student WORKERS, Ben....

Is it stifling their spirits too much to expect them to work when they're
at their job???

These do not sound like public-access machines in the library.

--
Good Luck,

Keith
Microsoft MVP [Windows XP Shell/User]

sorry, i thought children
were considered to be under the age of 18.

i wouldn't want to attend a university that
has a dictator for a director or considers its students
that pay your salaries for attending, as children.

You say you are only doing what you have been told to do.
But is it within the codes of ethics? I don't think so especially
coming from an institution that receives public funding, receives
money from the students, and a director who rather dictate personal
policy rather than discussing the issues with the students...

Next thing you will be ordered to do is to
go to the library and remove the art books
because the students are spending too much time
looking at the nude masterpieces.

as long as the "children" don't recognize the conspiracy;
as long as you have 100% over the control
of the network (seems to me that you do not);
and as long as you are acting within the established
guidelines and not those just conveniently made but a director
who probably spends too much time drinking coffee;
and as long as a federal judge doesn't
consider the alterations as a violation,

then you are "a"-"ok"....

 

[DatabaseBen]

I hope you got the assistance you
needed from the ng. But if not then
may i suggest the following:

Let the network administrator know that
the administrator priviledges are being abused by
other student workers and need to set up
a "studentworker" user account and
priviledges - including yourself.

If official policy allows then the network administrator will begin
providing all the assistance that is needed
to help the student workers focus of "wurkin"

(But i still think that proper leadership/ supervision and/or
informing the other studentworkers of the problem is the "solution"....good
luck..)

 

[Alias~-]

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install items
like Instant Messenger. I'm assuming I need to change their account to
"restricted users" but what about blocking internet access?

Thanks!

Use a whip.

Alias