win98 and win2000 server

hi everybody,
i have LAN with 11 pc and win2000 server (DNS, ACTIVE DIR., ect.) the users login on a domain server. there is 35 users. the problem is that not all users have to use internet how can i restrict the access for some usres?
thanks and sorry for the bad english. by
semolaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JivkoCommented:
There is not built in solution for restricting users from internet access in W2000 server. The only way to do this is to manualy remove the default gateway or DNS server on the resdtricted workstations.
There is MS solution called Microsoft ISA server. It have a built in per user / per IP addres restriction.
There is a cheep variant from Microsoft limited to 50 users
called Small Buisines Server. It have a bult in ISA server, Exchange Server and SQL server 2000.
There is a third party Proxy software like:
http://www.proxyplus.cz/
http://www.deerfield.com/products/wingate/
and more...
Regards
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lrmooreCommented:
Jivko is right. A proxy server/service is one of the best ways to restrict on a user-by-user basis.

What kind of Internet connection do you have? Do you have a firewall and/or a router on the connection? If so, there may be something you can do on the firewall or the router.
0
HendroCommented:
If you don't have a Proxy server then you can simple enable a password in Internet Explorer to block them to browse.

To do this in Internet Explorer go to:

Tools, Internet Options, Content, Enable and General.
0
GaryBatesCommented:
If you use login scripts you could import a registry file that imputs a spoof proxy server and port which is how I do it.

for example if your login script is a batch file:

IF %USERNAME% = "John" GOTO DISABLE

:DISABLE

regedit /s proxy.reg

example of proxy.reg:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000001
"ProxyServer"="disabled:0000"


hope this helps
Gary.
0
CleanupPingCommented:
semola:
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
EXPERTS:
Post your closing recommendations!  No comment means you don't care.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.