Well there is the hard way and there is the easy way...
The hard way is setting rights and deny rights on
multiple files that a user uses to get on the
internet,..being the browser, the dialup,.....
That would be too much work I suppose.
The easiest way I reckon and one that can't be
circumvented is to install an IP security policy.
Go to
http://www.analogx.com/contents/articles/ipsec.htm
and download the policy (
http://www.analogx.com/files/aps-
ipsec.zip), unzip and use regedit to add this file to the
registry
Go to the mmc console and add the local group policy
snapin, find the ip security policy manager and make sure
that the assign is set to yes. When the file was
correctly added to the registry you will notice a new IP
policy called AnalogX....
Click it and you can turn off all the rules by unchecking
them and only leaving the "DENY" rules.
This means that any user logged in cannot make any
outbound connections and is completely shut of from the
internet.
When you are logged in as admin, just unassign the policy
or check the ports you wanna use and you can browse the
internet again.
Sincerely,
Bill
