Restrict a Specific User on Workstation from getting on the Internet & the Address my My Computer

Posted on 2005-04-18
Last Modified: 2010-04-18
Hi guys, we recently got a virus on our network from someone on the internet. the powers that be want the internet locked out for certain users on a workstation, however other users need access to the internet.

I am running Win Server 2K3 with XP Pro on 10 Workstations. How do i restrict a specific user not to be able access the internet. And also not to be able to use the Address bar on "My Computer" to access this internet.

I need this ASAP.

Thanks Alot!

Question by:jokeefe1130
    LVL 4

    Accepted Solution

    assign a special logon script for the user and on the script set network routes to something invalid. By this way the user is totally cut out of the net. If the user needs to access the 2K3 server, set route to it only and other routes to something invalid like

    See "route /?" for help about setting network routes and "route print" (on the workstation) to print acrive routes.

    Other solution is to set DSN server to, by this way the user is not able to get to the internet by entering domain names (like but is still able to access internet by ip-addresses.

    LVL 15

    Assisted Solution

    I was examining Group Policy as it pertains to the USER groups, but don't really see anything solid.  

    I'll double-check, but I think the best way to control access is with Microsoft's ISA server.
    LVL 13

    Assisted Solution

    Besides ISA Server you could create a Diffrent OU for the users you dont want to access the internet.

     In Group Policy for that OU you set them to use a non existant Proxy Server.  The internet will fail because there is not proxy server for them to gain internet.  You could then restrict them from going into Tools --> Internet options and clearing the Proxy Options.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now