How to configure a Win7 not internet-connected ?

We have some Win7 computers inside our LAN solely used for connecting to our internal file server to run a single application. They don't need to connect to Internet and don't have CD drive, etc for user to install anything.
My question is, how to configure these computers to isolate from Internet so no virus or hacker's threat at all?
CastlewoodAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
It might be easier to set up a VLAN for these machines and do not let the VLAN segment out to the internet.

This would allow you to connect them all at once for inevitable updating.

If on your LAN, manage the AV application from the server and that should handle virus protection.
0
tailoreddigitalCommented:
Set a static IP on those machines and block those IPs at the firewall.

You could still install software via a flash drive.
0
JohnBusiness Consultant (Owner)Commented:
Static IP addressing is a pain the butt over the long term, so avoid a static IP solution if you can.
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

Brian PringleSystems Analyst II, SCM, ERPCommented:
If you just want to block the users from getting online, setup a fake proxy server address in the network settings or in Internet Explorer connection settings.  The computer will not be able to get online, but will have access to the rest of your network.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CastlewoodAuthor Commented:
Again, the goal is to prevent virus or hacker's threat from internet. Would blocking the users from reaching out to internet pretty much prevent the threat??
0
JohnBusiness Consultant (Owner)Commented:
goal is to prevent virus or hacker's threat from internet.

Most people do not realize that antivirus is all rear guard action and users are never hapless victims.

So yes, keep users from accessing internet will help.

But that does not stop them from bringing a USB key from home (working at home) and plugging it into your network.

So even without internet, but sure to have server managed antivirus in place.
0
Brian PringleSystems Analyst II, SCM, ERPCommented:
Most "viruses" are actually trojans, adware, spyware, ransomware, and etc.  These don't usually get installed just by having a computer connected to a network.  Instead, it is almost always the fault of the user for them getting installed.  They browse the Web, click on things that they shouldn't click, and click "Yes" to the prompts to install it without thinking about what they are doing or the consequences.

If you have a good antivirus program installed, a firewall enabled, and prevent the users from getting on the Web, you will be fairly well protected.  However, as @John_hurst said above, you still need to worry about removable devices.  You can disable the USB ports in the BIOS, setup policies that prevent removable devices, and etc.  

The users are always the weakest link in security.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.