Re: Internet Access without Network Resource Access

From: Robert L [MS-MVP] (noreply_at_hotmail.com)
Date: 11/05/04 

Date: Thu, 4 Nov 2004 21:13:13 -0600

in this case, you don't join the domain. If the computer obtains the ip, DNS
and gateway from DHCP, it should be able to access the Internet and IP
printers. you setup permission to deny accessing other resources. And SAV
should work too. 

-- 
For more and other information, go to  http://www.ChicagoTech.net
Don't send e-mail or reply to me except you need consulting services. 
Posting on MS newsgroup will benefit all readers and you may get more help.
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on 
http://www.ChicagoTech.net
Networking Solutions, http://www.chicagotech.net/networksolutions.htm
VPN Solutions, http://www.chicagotech.net/vpnsolutions.htm
VPN Process and Error Analysis, http://www.chicagotech.net/VPN%20process.htm
VPN Troubleshooting, http://www.chicagotech.net/vpn.htm
This posting is provided "AS IS" with no warranties.
"Jason Scoggins" <someone@microsoft.com> wrote in message 
news:%23TiUnUswEHA.1308@TK2MSFTNGP09.phx.gbl...
> I'm looking to join a Win2k workstation to the domain for users out in a 
> warehouse. They should only have access to the internet, and possibly some 
> network printers. I would like to limit access to all file shares on the 
> network. I've come up with a couple ways to do this, but everything seems 
> like more work than necessary. I feel like I'm missing a simple switch 
> that I can somehow flip for this type of restricted user. We have a Win2k 
> Domain Controller, so I'm assuming that I'm going to want to do this with 
> Active Directory. Symantec Antivirus Server manages all workstations on 
> the network and also runs off of the PDC. I obviously would like to have 
> this remain. So what's the easiest way to make it so they do not have 
> access to file shares on the server, and if possible, even other 
> workstations on the network?
>
> Thanks in advance
>
Loading