Solved

Block computers from accessing the internet

Posted on 2013-06-06
2
592 Views
Last Modified: 2013-06-14
We have a network running SBS 2003, with Windows 7 clients. WE also have a zywall 20 usg. We have a couple of Windows XP computers as we need them to run some older applications that are not compatible with windows 7. These machines need access  to the network but we would like to block access to the internet from them. Is there a way to achieve this, we can't do it on a user basis as a number of different users logon to the machines and they need internet access from other computers.
0
Comment
Question by:reca1
2 Comments
 
LVL 4

Accepted Solution

by:
MrC63 earned 500 total points
ID: 39227531
There is a fairly simple solution to this.  in the Network configuration (Control Panel -> Network Connections), simply assign these computers a static IP address, but *do not* define a Gateway (leave the gateway field blank).  If they have no gateway, then will never be able to access the Internet.

You can also do this via DHCP by adding a reservation for the MAC addresses of the network adapters in these systems, and then customizing the options for each reservations -- once again leaving the Gateway field blank.

The benefit of the first method is that it's quick and easy.  The downside is that any person with Admin access to the computer (and with a modest knowledge of TCP/IP) could identify the missing gateway and enter the appropriate information.

The benefit of the second method is that the IP address / gateway is  dynamically assigned and controlled by the server.  The downside is similar to the above;  a user admin access to the system along with modest TCP/IP knowledge could assign a static IP address and define the proper gateway.
0
 
LVL 28

Expert Comment

by:asavener
ID: 39228821
Assign static IP addresses, and then block those addresses on the firewall.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

25 Experts available now in Live!

Get 1:1 Help Now