Solved

How to filter certain workstations or laptops from accessing Internet in WIN 2000 Server?

Posted on 2006-07-11
11
271 Views
Last Modified: 2012-05-05
I have a WIN 2000 Server with ADSL through a lnksys router that my clients have access to the internet.  I want certain PC's and laptop who log unto the server as a user to not have access to the internet.  Or should I do this through the LINKSYS Router?  Any help is appreciated.
0
Comment
Question by:scatcom
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 17084620
Do you want to stop anyone who uses certain machines from accessing the internet?
Or certain users on any machines?

If anyone on certain machines then the easiest way is to reserve an IP address in DHCP and then don't set a default gateway for that machine.

If for certain users, then use a group policy to set dummy proxy settings in Internet Explorer.
Will not stop someone using firefox on their machine - if they can install it.

Otherwise you need something where access can be authenticated - a proxy of some kind. I don't think any of the Linksys routers have that capability, so it would have to be a third party product.

Simon.
0
 

Author Comment

by:scatcom
ID: 17085489
DCHP (Server right?) and don't set the default gateway to the router itself? or gateway to the ISP settings?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17085617
If you operating in a domain, then the DHCP server should be a Windows 2000 machine. If you are using a router as the DHCP server then you don't have the control over the DHCP that you need.

Don't set any default gateway - so that the machines only get an IP address, subnet mask and DNS server.

Simon.
0
 

Author Comment

by:scatcom
ID: 17086076
I'll give that a try and see if it works.......
0
 
LVL 12

Expert Comment

by:Einstine98
ID: 17087145
ISA server would be ideal for this kind of job, but i you can afford it
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17087321
if you are going to take the route of not setting a gateway, then block users manually entering one...! 99% of the time the gateway is the .1 address and it doesnt take a genius to know how to insert an address...i like the false proxy idea myself, thats what i use then block them changing it :)
0
 

Author Comment

by:scatcom
ID: 17095500
So do I block the users in the router or in the server?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17095510
via the server with group policy
0
 

Author Comment

by:scatcom
ID: 17095538
Create group policy first and then add users to this policy?  And if so, how do I construct this policy specifically to a false proxy scheme? thanks!!
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 125 total points
ID: 17095560
create a seperate group policy with this false proxy

User Configuration\Windows Settings\Internet Explorer Maintenance\Connection:

then stop the changes

Administrative Templates\Windows Components\Internet Explorer\Disable changing proxy settings

add this policy to your desired OU and use securitly filtering to get rid of the users you DONT want it applied to

http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Security-Filtering.html
0
 

Author Comment

by:scatcom
ID: 17095574
Thanks everyone....
0

Featured Post

Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now