Disable internet access at a specific time...

I would like to disable user access to the internet at 10 PM and then allow the internet access again at 6 AM on a Windows 2000 Pro sp4 machine. The machine is not part of a domain so I'm guessing it would be a local policy that would need to be created(?) I have played around with the mmc looking at the different options there but I can't find how to limit user access to internet after a specific time. Also if possible, not really a must have but I would like the user to be able to access his/her files on their user folder on the server (NetWare client/server network). But again disabling the internet access after 10 PM is want is needed the user only has to access their files after 10 on very very rare occasions this would just be a plus for them.

 Thanks for any help you gave offer!!
-RBennett
Ryan BennettAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KaliKoderCommented:
Hello rbennett,

Is this machine you are talking about, behind a router ? Most routers have configurations that would allow you to block access to the Internet for certain hours you specify. Is this machine a home machine ? Are you behind a router such as DLINK, LinkSys, NetGear etc...?

Thanks
0
Lee W, MVPTechnology and Business Process AdvisorCommented:
You could look into setting up a script that removes the gateway at a given time and then adds it back - but the netware server MUST be on the same subnet.  Write the script, then schedule it with the Scheduled Tasks control panel
0
Ryan BennettAuthor Commented:
We are behind a router but I do not have access to it or it's configuration, the routers are managed by a different agency and it's like pulling teeth to get them to do anything at all!
 The script idea sounds workable but I am not a scripter do you have any suggestions or could you point me to some good resources that could help me create a script to do this?

 Thanks,
-RBennett
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

Lee W, MVPTechnology and Business Process AdvisorCommented:
Try this command:
netsh interface ip set address gateway=none

If it works, then put it in a batch file and schedule the task.  To put the gateway back on, use:
netsh interface ip set address gateway=123.45.6.78
(where 123.45.6.78 is your gateway).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lee W, MVPTechnology and Business Process AdvisorCommented:
Also - this is pretty cool (or so I think...)
Cool Things to Do with Netsh
http://www.winnetmag.com/Windows/Article/ArticleID/41111/41111.html
0
KaliKoderCommented:
Hello again Rbennett,

Just following up, can you answer the following for me:

- You want to block access to internet after 10 PM for only one user or all users who log on to that machine ?
- When you say internet access, do you mean only Internet Explorer Access to websites ?
- Is this user/users whom you are trying to block are local users on that machine or a part of the domain (domain users) ?

Thanks
0
Ryan BennettAuthor Commented:
These computers are at a 24/7-365 site. The after hours staff are getting into peoples computers that have left for the night to play games on and looking at porn, and subsquently bring in tons of viruses, torjans, and spyware that I have to clean off on a daily basis. The offices cannot be locked for a number of stupid reasons. So I would like to somehow turn off access to any websites so that the users cannot play games or look at the porn and have to go back to work on their own machines.
  I would like to leave the connectiblity to their netware server intact if possible, but it is really a secondary issue at that time of night on those machines. It would only be if the day shift staff came in late, then they would still be able to access their user folder on the server, just not the internet.

 Thanks,
 RBennett
0
KaliKoderCommented:
Hello again rbennett,

Can you have a policy enforced on the machines concerned where the machine would lock after few minutes of inactivity (eg; 20 mins idle time), and then even if the employees left the machine unlocked, the system would force a lock after 20 minutes, and bring on the screen saver and you would need the password to unlock it, and hence the late night folks would not be able to get on to those machines and use someone elses account to do such activities (it provides atleast one bar for them, cuz they are more liable to activities they do using their own accounts rather than others).

Now regarding the problem about restricting the access to internet for some accounts on certain hours, its very possible using some third party software, like Cybersitter, NetNanny, SurfPatrol etc, or any sort of Proxy server, even Microsofts ISA server, which can restrict access to such sites, or prevent internet access alltogether at certain times. However, these are all third party solutions, and would cost money. I am still not able to come up with a simple solution that would disable internet access only, for particular accounts only, at only certain times...
0
KaliKoderCommented:
If you were to impliment a solution like the ISA server from Microsoft. Then it becomes really simple, here are the steps:

http://groups.google.ca/groups?q=how+to+restrict+internet+access+to+certain+times&hl=en&lr=&newwindow=1&selm=uu9xBnFUCHA.1240%40tkmsftngp12&rnum=1

I do believe, you would have to resort to a third party solution, like ISA server..
0
Ryan BennettAuthor Commented:
Sorry it took so long to get back to this, I was finally able to test this and found the command I had to use on a Windows 2000 machine was as follows:

to disable the internet access:
netsh interface ip set address name="local area connection" source=static addr=10.0.0.9 mask=255.0.0.0 gateway=10.0.0.1 gwmetric=1

to change back to DHCP:
netsh interface ip set address name="local area connection" source=dhcp

Thanks everyone for your input!!

 RBennett
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.