How to limit domain users web access without group policy

Posted on 2009-02-10
Last Modified: 2013-12-08
Hi All

I need to limit a user accounts access to only be allowed get to to the Intranet page on one of our PC's here.
We can't do this through group policy at the moment because of internal wrangling, we are a satellit office and are on the bottom of the list.

Basically its a domain user account which will only be logging onto one PC and which will only need access to the intranet.

I tried things like Windows Steadystate but this doesnt work on a domain account, I could put in a weird non existent proxy and just disable it to local access but then they are able to go into the internet settings and disable it...

Basically I need to lockit down as much as possible on this one machine but need to do it locally...

All help apreciated..
Question by:darran_d
    LVL 1

    Accepted Solution

    Ive done this successfully by mucking with the ROUTE command.

    Create a .CMD file to :

    1. Modify the default gateway to point to some useless place like the loopback address..

    2. Create a second route for internal routing to go to the correct default gateway.

          ROUTE ADD MASK

    This should correctly route to any address beginning with 10.x.x.x. but fail to get outside the local broadcast domain for any other address.

    You can then launch the CMD from the login script, registry autorun, scheduled task, or your favorite injection point.

    Good luck.


    Author Comment

    Thanks for the reply...

    I have tried this but unfortunatley it wouldnt suit my purposes, Instead I had to go through Group Policy...

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
    This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now