Restricting Internet Connection Sharing on LAN

[Luiz Borges]

Hello,
I have a LAN in my office (20 pcs), with most of the machines with
WinXP and a couple with Win98, the server is an old computer running
Win98 and using ICS for internet sharing.

Now I need to restrict the internet connection to certain users instead
of share it to all user of the network, but all the users must still
have access to the local LAN.

I think I will need a "connection" per user (something like a VPN
inside a LAN), or a way to restrict which users can have internet
access (which sounds like I will need a domain or something). I would
rather stay with the first option (vpn-like connection) if that is
possible.

How can that be done? If needed we can buy a license to Win2K or
Win2k3, or even use Linux.

Thanks in advance,
Luiz Borges

 

[Robert L [MS-MVP]]

Since you don't have many users, you may do that manually. This link may help,

how to restrict internet access 8. Setup Group Policy to Restrict Internet Access. Note: You may be able to use Scheduler Task to setup when we want to active the restriction. ...
www.howtonetworking.com/Internet/restrictie0.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Hello,
I have a LAN in my office (20 pcs), with most of the machines with
WinXP and a couple with Win98, the server is an old computer running
Win98 and using ICS for internet sharing.

Now I need to restrict the internet connection to certain users instead
of share it to all user of the network, but all the users must still
have access to the local LAN.

I think I will need a "connection" per user (something like a VPN
inside a LAN), or a way to restrict which users can have internet
access (which sounds like I will need a domain or something). I would
rather stay with the first option (vpn-like connection) if that is
possible.

How can that be done? If needed we can buy a license to Win2K or
Win2k3, or even use Linux.

Thanks in advance,
Luiz Borges

 

[Luiz Borges]

I don't think that's a good solution, as of today, just a few of the
users (6 of 40 total users) have their own accounts in EACH XP machine,
the rest of them use a general User account (that's why I didn't want
to use a Domain). For that solution to work I would have to create
accounts to ALL of the users in ALL the machines, and configure each of
them, one by one. That's why I wanted something dial-up or VPN-like
(just "Connect to Internet" with their user and pass, and they are
ready to go).

I have no idea how to use a Domain, but if that is what is need I might
try it too. I have seen some mini-linux-routers, but they just share
the internet across the LAN. There must be some way to do that.

Luiz Borges


Robert L [MS-MVP] escreveu:

 

[Robert L [MS-MVP]]

You may use ISA or setup a domain with group policy.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
I don't think that's a good solution, as of today, just a few of the
users (6 of 40 total users) have their own accounts in EACH XP machine,
the rest of them use a general User account (that's why I didn't want
to use a Domain). For that solution to work I would have to create
accounts to ALL of the users in ALL the machines, and configure each of
them, one by one. That's why I wanted something dial-up or VPN-like
(just "Connect to Internet" with their user and pass, and they are
ready to go).

I have no idea how to use a Domain, but if that is what is need I might
try it too. I have seen some mini-linux-routers, but they just share
the internet across the LAN. There must be some way to do that.

Luiz Borges


Robert L [MS-MVP] escreveu: