Solved

How to configure a Win7 not internet-connected ?

Posted on 2015-01-22
7
75 Views
Last Modified: 2015-02-02
We have some Win7 computers inside our LAN solely used for connecting to our internal file server to run a single application. They don't need to connect to Internet and don't have CD drive, etc for user to install anything.
My question is, how to configure these computers to isolate from Internet so no virus or hacker's threat at all?
0
Comment
Question by:Castlewood
7 Comments
 
LVL 90

Expert Comment

by:John Hurst
ID: 40565628
It might be easier to set up a VLAN for these machines and do not let the VLAN segment out to the internet.

This would allow you to connect them all at once for inevitable updating.

If on your LAN, manage the AV application from the server and that should handle virus protection.
0
 
LVL 23

Expert Comment

by:tailoreddigital
ID: 40565630
Set a static IP on those machines and block those IPs at the firewall.

You could still install software via a flash drive.
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 40565634
Static IP addressing is a pain the butt over the long term, so avoid a static IP solution if you can.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 16

Accepted Solution

by:
Brian Pringle earned 500 total points
ID: 40565666
If you just want to block the users from getting online, setup a fake proxy server address in the network settings or in Internet Explorer connection settings.  The computer will not be able to get online, but will have access to the rest of your network.
0
 

Author Comment

by:Castlewood
ID: 40565723
Again, the goal is to prevent virus or hacker's threat from internet. Would blocking the users from reaching out to internet pretty much prevent the threat??
0
 
LVL 90

Expert Comment

by:John Hurst
ID: 40565732
goal is to prevent virus or hacker's threat from internet.

Most people do not realize that antivirus is all rear guard action and users are never hapless victims.

So yes, keep users from accessing internet will help.

But that does not stop them from bringing a USB key from home (working at home) and plugging it into your network.

So even without internet, but sure to have server managed antivirus in place.
0
 
LVL 16

Expert Comment

by:Brian Pringle
ID: 40568280
Most "viruses" are actually trojans, adware, spyware, ransomware, and etc.  These don't usually get installed just by having a computer connected to a network.  Instead, it is almost always the fault of the user for them getting installed.  They browse the Web, click on things that they shouldn't click, and click "Yes" to the prompts to install it without thinking about what they are doing or the consequences.

If you have a good antivirus program installed, a firewall enabled, and prevent the users from getting on the Web, you will be fairly well protected.  However, as @John_hurst said above, you still need to worry about removable devices.  You can disable the USB ports in the BIOS, setup policies that prevent removable devices, and etc.  

The users are always the weakest link in security.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now