Re: 2nd user needs network but blocked from internet

Tech-Archive recommends: Speed Up your PC by fixing your registry

I really appreciate your help, thank you.
OK, I think I get how to use netsh and it should work,
BUT, I believe the user I wish to BLOCK for the internet needs to have
"administrator" privleges inorder for the command to function, when they and
only they login.

There are to be three users on the computer, each with a unique username and
password.
Administrator(me) for maintenance, etc. full network access.
Fulltime for my regular secretary. full network access.(user or power user.)
and "PartTime" for temp office help........LAN Access: yes, Internet Access:
NO. User group only. Naturally I don't want to give my part time help
"administrator" status!

with netsh I should be able to "enable" the gateway address for me and my
full time employee, but how do I run this when the "Part time" employee logs
on with only user privliges?

would a program like "net nanny" be easier? lol, been years since I saw
that one.
Any further tips will be most appreciated, thank you again.

"Pegasus (MVP)" wrote:

Yes, you could remove the default gateway and/or the DSN entry,
using netsh.exe, provided that the user has sufficient privileges to
run the command. Below is a link and some examples for the command.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;242468

For a Static IP use:
netsh interface ip set address "Local Area Connection" static 125.187.7.56
255.0.0.0
netsh interface ip set address local static 192.168.1.1 255.255.255.0

And for DHCP use:
netsh interface ip set address "Local Area Connection" DHCP

netsh interface ip set address name="Local Area Connection 2" source=static
addr=192.168.10.10 mask=255.255.255.0 gateway=none
netsh interface ip delete dns name="Local Area Connection 2" addr=all
netsh interface ip set dns name="Local Area Connection 2" source=static
addr=192.168.20.20
netsh interface ip add dns name="Local Area Connection 2" addr=192.168.30.30
netsh interface ip set address name="Local Area Connection X"
gateway=10.0.0.1 gwmetric=1 source=static addr=192.168.0.10
mask=255.255.255.0
netsh interface ip set address name="Local Area Connection" source=static
addr=192.168.44.1 mask=255.255.255.0 gateway=192.168.44.254 gwmetric=1
netsh interface ip set dns name="Local Area Connection" source=static
addr=192.168.44.254


"Steve Allen" <sallenss@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:06F832D0-A87D-4E0B-A94F-71BC2C7F7544@xxxxxxxxxxxxxxxx
Thank you for the tip but alas, it seems I must have XP for SteadyState.

Question: if I use static IP addresses on all workstations,
Can I build a batch file or script that would delete the tcp/ip entry for
the default gateway and have it run when a particular user logs in?

I am thinking that would allow LAN access but not to the internet.

"Pegasus (MVP)" wrote:


"Steve Allen" <sallenss@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:44AFFCA1-F383-423D-BD9C-530D5A6CEAED@xxxxxxxxxxxxxxxx
I want to add a second user to my workstation and grant normal network
(peer-to-peer) access, but I don't want them to have access to the
internet.
I haven't found an easy way to do this, I've tried looking at
permissions
but
I'm missing something.


Windows SteadyState might be for you although I don't know if
it works under Win2000.
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx






.

Relevant Pages

  • Re: Router Configuration
    ... W2K and XP do not support diabling the NIC with netsh. ... To reenable it using DHCP ... netsh interface ip set address="Interface Name" dhcp ... most likely require scripting. ...
    (microsoft.public.scripting.vbscript)
  • Re: Add ip Address
    ... You might try netsh from a command prompt; ... to set ip address and subnet, 2 to clear previous dns server ip's, 3 to set primary dns server, 4 to set alt dns server, 5 to set ip address DHCP assigned ... netsh interface ip set address name="Local Area Connection" ...
    (microsoft.public.windows.server.scripting)
  • Re: explorer keeps crashing when network properties is entered
    ... You might try netsh from a command prompt; ... set primary dns server, 4 to set alt dns server, 5 to set ip address DHCP ... netsh interface ip set address name="Local Area Connection 2" ...
    (microsoft.public.win2000.general)
  • Re: Showing IP address
    ... Real command line junkies use netsh. ... netsh interface ip show address ... netsh wlan show all ...
    (alt.internet.wireless)
  • Re: Modifying IP address by modifying the registry programatically
    ... I didn't correlate this thread with any other. ... So long as he understands that netsh is there if he needs it ... ... > netsh interface /? ... > the reg keys. ...
    (microsoft.public.windowsxp.security_admin)