Internet restrictions on user account but not admin account

I have about 6 computers with a a user account and an admin account. These are not setup on Active Directory. I need to remove internet access on the workstations but not the admin account. Whats the best way to accomplish this?


p.s. All Windows 7
Who is Participating?
This is definitely possible... it just takes a bit of extra configuration.  First of all, you will want to utilize the Multiple Local Group Policy feature available within Windows 7.  It is extremely handy when you are managing Workgroup computers!  Here is a pair of good tutorials that explain how to configure group policy settings that will affect non-administrators, along with a comprehensive TechNet article for reference:

How to Apply Local Group Policies to All Users Except Administrators

Explore the benefits of the Multiple Local Group Policy feature in Windows 7

Step-by-Step Guide to Managing Multiple Local Group Policy Objects

Once you have that established, you can potentially configure the proxy settings for non-administrators to be "" within the following location:

User Configuration -> Windows Settings -> Internet Explorer Maintenance -> Connection -> Proxy Settings

To disable potential changes, enable the follow setting:

Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Disable changing proxy settings
Change the default gateway to and change it to the correct gateway when you log on.

Are you referring to all traffic or just websites?  The above would stop even mail flow.
cnl83Author Commented:
Just web sites
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

Because you don't have any centralized management (Active Directory and GPO) this is more difficult for a 'Clean" solution.

Suggestion would be to enable windows firewall on each Windows 7 machine, block outgoing ports 80 and 443.  When you log on as admin, you can disable the firewall, do what you need to do, then enable it again.
cnl83Author Commented:
I will try the above suggestion on Friday. I will report back.
cnl83Author Commented:
I have not done this yet. It will be a few more days before I can get on site to do this.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.