Re: how to stop a user's internet access???

First, as you have done already, I would certainly ensure that they
don't have administrative privileges.

Second, there are a number of ways to mess up internet communications
without disrupting the LAN. Most of my suggestions would involve
changing settings, then ensuring that their accounts don't have the
permissions required to reset them, but then when you need Internet
access as Administrator you can re-enable it as necessary.

For example, you could change the connection settings in IE to use a
non-existent proxy server, then disable the connection settings tab for
your student worker accounts.

If everything they need to get to is on the same subnet, you could also
remove the default gateway address from the network card tcp/ip
settings, and they would not be able to communicate with any computer
not on the same subnet.

You might want to look at some of the settings you can control/lock
down in gpedit.msc to discourage their nonproductivity...

John John wrote:
You're welcome. I don't know much about Zone Alarm but it seems odd
that it wouldn't have any password protection of sort on the
configuration settings. I found this at the ZA site:

Go to Overview -> Preferences -> Set Password.

http://forum.zonelabs.org/zonelabs/search?q=set+password

John

Bubba Gump wrote:

John, I'm going to change their accounts on the system from
administrators group to "restricted users". I don't have access to the
campus access point so I'm trying to do this interoffice.

I'm playing with ZoneAlarm pro to see if I can get it to do what I want
but so far it's not going smoothly. i can get it to block internet
access perfectly but it doesn't have an option to require a password to
re-enable internet access. Go figure!

Thanks!
Buster

John John wrote:

HeyBub wrote:

Bubba Gump wrote:

ok, I've got a silly question. I work for a university and we have
student workers. We have a student worker computer that they do
legitimate work on. However, we've caught them spending a lot of time
instant messaging as well as lurking around myspace.com. How can I
EASILY block internet access while still allowing network access?

Currently their local accounts are set as local administrators which
obviously is part of the problem b/c it's allowing them to install
items like Instant Messenger. I'm assuming I need to change their
account to "restricted users" but what about blocking internet access?



From a Google search (block+internet+access+xp)

"...go to Run and type in gpedit.msc (GP stands for group policy)
,,then go to " user configuration" / Administrative Template / then
you can expand "Desktop" and "Control Panel" and "Network" and
"system",,, everyone of those option have all kind of policy have
disable /enable option which will allow you to make changes into
behavior on the operating system. Please remember that if you are
going to make the changes, you HAVE to be logged into that specific
account to do that. You can't make the changes from your account into
another. Also remember that gpedit.msc is very powerful tool so don't
make changes where it would lock you /account out."


You have to be logged on as an Administrator to edit/add/modify Group
Policy Objects (not be logged into that (user's) specific account).
The suggestion is good but the problem is that being given
administrative privileges the student workers can easily go and change
the policy or for that matter any other local machine attempts to
block access to the internet. The users need to be reigned in and
have their admin privileges revoked. Other than that the only way to
stop their access to the internet is to physically remove the machine
from the internet or as another poster suggested have the firewall
block it or block it from the router access point.

John


.

Relevant Pages

  • Re: Internet Explorer and index.dats
    ... I use a batch file that runs at boot. ... > So if my user account is reflected in the administrators account, ... >> the internal "Administrator" account. ... >> since if you delete the Temporary Internet Files via the Windows ...
    (microsoft.public.windowsxp.customize)
  • Re: Password protect folders
    ... account on my computer. ... files and folders without blocking access to the internet. ... what they want in the folder and resetting permissons back. ... counting the built-in Administrator account, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Settings and security
    ... preference settings within their own profile in Internet Explorer, Desktop, ... You should configure your're children's profile as limited account, ...
    (microsoft.public.windowsxp.general)
  • Re: User Account Suddenly Inaccessible
    ... Documents and Settings, there are these five folders: ... Without access to my previous user account, ... My internet connection is via dial-up, ...
    (microsoft.public.win2000.general)
  • Re: Going in circles....Please HELP!
    ... run your computer using administrator because of the damage that trojans and other things can do......but my computer is not allowing access to the internet on any account other that my administrator account. ... create an individual user account with the ... to access the internet. ...
    (microsoft.public.windowsxp.newusers)