Prevent Internet access

  • Thread starter Thread starter Ted Rogers
  • Start date Start date
T

Ted Rogers

I have a friend who has a small company with 4 workstations networked to a
Windows 200 server machine.

One machine is situated in an warehouse where the users need to have network
access but my friend knows they are browsing the Internet and sending
inappropriate emails when they should be working. Is there any way of
preventing Internet access to that particular machine but still allow access
to the internal network?

many thanks

Ted
 
Ted Rogers said:
I have a friend who has a small company with 4 workstations networked to a
Windows 200 server machine.

One machine is situated in an warehouse where the users need to have network
access but my friend knows they are browsing the Internet and sending
inappropriate emails when they should be working. Is there any way of
preventing Internet access to that particular machine but still allow access
to the internal network?

many thanks

Ted
Click to expand...

Sorry I should have said 4 workstations running XP Pro
 
Should be some means of filtering or allowing/disallowing access to specific
machines... don't have a copy of 2k, though.
 
Using DHCP?

Assign the station a static IP, but leave the gateway at 0.0.0.0.

Worked for me once...
 
In your router/firewall (if you have one) there might be settings for
blocking internet access for specific computers/ip addresses. Or if your
using internet connection sharing on the win2k server there should be
settings in there.
Or
How good are they on the computer? If they are just basic users you could
always just set internet explorer to use a proxy server, and since you don't
have one, internet will not work.
In IE: tools, internet options, connection tab, lan settings, check the use
a proxy server box and set the address to 127.0.0.1, port anything(1234).
This can be easily changed if they know what they're doing.
There is probably some third party apps that will do what you want to. Try a
search on google for monitoring or internet blocking software.
 
The proxy setting will work and you can even lock the user out from being
able to change it. Copy the following into a text file and name it
something.reg. Simply import it on the workstation while logged on with the
user you need locked out and you're all set. If there are multiple users,
you'll need to log into each one and import this. Unfortunately, I'm not
aware of a way to lock it out system wide, unless you use the method of not
using a default gateway on the PC.

------ start copy at next line ------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"PrivacyTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Fonts"=dword:00000001
"Languages"=dword:00000001
"Accessibility"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"MigrateProxy"=dword:00000001
"ProxyServer"="false.proxy.com:8080"
"ProxyEnable"=dword:00000001

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley
 
Cool thanks for the reg tweak. Do you have an undo as well? Or what would
make it work like normal again, take the "lock" off.

Mike Brearley said:
The proxy setting will work and you can even lock the user out from being
able to change it. Copy the following into a text file and name it
something.reg. Simply import it on the workstation while logged on with the
user you need locked out and you're all set. If there are multiple users,
you'll need to log into each one and import this. Unfortunately, I'm not
aware of a way to lock it out system wide, unless you use the method of not
using a default gateway on the PC.

------ start copy at next line ------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"PrivacyTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Fonts"=dword:00000001
"Languages"=dword:00000001
"Accessibility"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"MigrateProxy"=dword:00000001
"ProxyServer"="false.proxy.com:8080"
"ProxyEnable"=dword:00000001

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley


purplehaz said:
In your router/firewall (if you have one) there might be settings for
blocking internet access for specific computers/ip addresses. Or if your
using internet connection sharing on the win2k server there should be
settings in there.
Or
How good are they on the computer? If they are just basic users you could
always just set internet explorer to use a proxy server, and since you don't
have one, internet will not work.
In IE: tools, internet options, connection tab, lan settings, check the use
a proxy server box and set the address to 127.0.0.1, port anything(1234).
This can be easily changed if they know what they're doing.
There is probably some third party apps that will do what you want to.
Click to expand...
Try
a
search on google for monitoring or internet blocking software.
Click to expand...
to
a
Click to expand...
Click to expand...
 
Just replace the dword:00000001's with dword:00000000's and that should
work. I usually just go into the registry (while no one is looking) and
delete the values. This method works for locking them out as long as the
user 1) doesn't have access to run regedit or 2) doesn't know the first
things about the registry.

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley


purplehaz said:
Cool thanks for the reg tweak. Do you have an undo as well? Or what would
make it work like normal again, take the "lock" off.

Mike Brearley said:
The proxy setting will work and you can even lock the user out from being
able to change it. Copy the following into a text file and name it
something.reg. Simply import it on the workstation while logged on with the
user you need locked out and you're all set. If there are multiple users,
you'll need to log into each one and import this. Unfortunately, I'm not
aware of a way to lock it out system wide, unless you use the method of not
using a default gateway on the PC.

------ start copy at next line ------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"PrivacyTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Fonts"=dword:00000001
"Languages"=dword:00000001
"Accessibility"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"MigrateProxy"=dword:00000001
"ProxyServer"="false.proxy.com:8080"
"ProxyEnable"=dword:00000001

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley


purplehaz said:
In your router/firewall (if you have one) there might be settings for
blocking internet access for specific computers/ip addresses. Or if your
using internet connection sharing on the win2k server there should be
settings in there.
Or
How good are they on the computer? If they are just basic users you could
always just set internet explorer to use a proxy server, and since you don't
have one, internet will not work.
In IE: tools, internet options, connection tab, lan settings, check
Click to expand...
the
use
a proxy server box and set the address to 127.0.0.1, port anything(1234).
This can be easily changed if they know what they're doing.
There is probably some third party apps that will do what you want to.
Click to expand...
Try
a
search on google for monitoring or internet blocking software.

I have a friend who has a small company with 4 workstations
Click to expand...
Click to expand...
networked
to
Click to expand...
Click to expand...
 
Thanks alot Mike.

Mike Brearley said:
Just replace the dword:00000001's with dword:00000000's and that should
work. I usually just go into the registry (while no one is looking) and
delete the values. This method works for locking them out as long as the
user 1) doesn't have access to run regedit or 2) doesn't know the first
things about the registry.

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley


purplehaz said:
Cool thanks for the reg tweak. Do you have an undo as well? Or what would
make it work like normal again, take the "lock" off.

The proxy setting will work and you can even lock the user out from being
able to change it. Copy the following into a text file and name it
something.reg. Simply import it on the workstation while logged on
Click to expand...
with
the
user you need locked out and you're all set. If there are multiple users,
you'll need to log into each one and import this. Unfortunately, I'm not
aware of a way to lock it out system wide, unless you use the method
Click to expand...
of
not
using a default gateway on the PC.

------ start copy at next line ------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control
Panel]
"GeneralTab"=dword:00000001
"SecurityTab"=dword:00000001
"PrivacyTab"=dword:00000001
"ContentTab"=dword:00000001
"ConnectionsTab"=dword:00000001
"ProgramsTab"=dword:00000001
"AdvancedTab"=dword:00000001
"Advanced"=dword:00000001
"HomePage"=dword:00000001
"Cache"=dword:00000001
"History"=dword:00000001
"Colors"=dword:00000001
"links"=dword:00000001
"Fonts"=dword:00000001
"Languages"=dword:00000001
"Accessibility"=dword:00000001
"Connwiz Admin Lock"=dword:00000001
"Connection Settings"=dword:00000001
"Proxy"=dword:00000001
"Autoconfig"=dword:00000001
"Ratings"=dword:00000001
"Certificates"=dword:00000001
"Profiles"=dword:00000001
"FormSuggest"=dword:00000001
"FormSuggest Passwords"=dword:00000001
"Messaging"=dword:00000001
"CalendarContact"=dword:00000001
"ResetWebSettings"=dword:00000001
"Check_If_Default"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"MigrateProxy"=dword:00000001
"ProxyServer"="false.proxy.com:8080"
"ProxyEnable"=dword:00000001

--
Posted 'as is'. If there are any spelling and/or grammar mistakes, they
were a direct result of my fingers and brain not being synchronized or my
lack of caffeine.

Mike Brearley


In your router/firewall (if you have one) there might be settings for
blocking internet access for specific computers/ip addresses. Or if your
using internet connection sharing on the win2k server there should be
settings in there.
Or
How good are they on the computer? If they are just basic users you could
always just set internet explorer to use a proxy server, and since you
don't
have one, internet will not work.
In IE: tools, internet options, connection tab, lan settings, check the
use
a proxy server box and set the address to 127.0.0.1, port anything(1234).
This can be easily changed if they know what they're doing.
There is probably some third party apps that will do what you want
Click to expand...
to.
Try
a
search on google for monitoring or internet blocking software.

I have a friend who has a small company with 4 workstations
Click to expand...
networked
to
a
Windows 200 server machine.

One machine is situated in an warehouse where the users need to have
network
access but my friend knows they are browsing the Internet and sending
inappropriate emails when they should be working. Is there any way of
preventing Internet access to that particular machine but still allow
access
to the internal network?

many thanks

Ted
Click to expand...
Click to expand...
Click to expand...
 
Back
Top