Windows Forum

Ask something
Discussion Locked

Controlling Internet access?

0 helpful
12 replies

by myths

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a way in Windows 2000 to control Internet access by User rather than by computer? I have a computer used by several individuals on three different shifts. Two shifts needs Internet access for their duties. The third shift shouldn't have Internet access, since they feel that surfing the net is more important than doing their jobs. The third shift has no need for internet access. Currently I am turning access on and off at the router, however, this only works when I'm here. On my days off or after I go home, there's no way for the people who need internet access to receive it or if it's left on, no way to prevent the ones abusing the privilege from using it.

12 replies

by cliffl

Not tried this just a thought. If you are using a firewall could you not turn off access to the browsers and password it so they could not turn it on again ?. And perhaps turn off access to the firewall so they could not turn it off.

Have fun cliff

by cg it

well depends on your network and if it's W2K with Active Directory AND using either ISA server or a proxy server. Also depends upon what brand/type router your using. Most enterprise level routers allow you to control outbound access a couple of different ways. Time, Machine, Service,. In W2K Active Directory environment using a proxy server or ISA server you can create an OU that has access and assign users who need it to that OU. Those that don't and aren't members won't.

by cg it

I revisited this question to see what others might have added. Answer # 3 does have a way of editing the registry and log on scripts for users BUT if your not familiar with registry editing or not comfortable doing it, dont' do it. incorrectly editng the registry can cause the system to not start. Without a backup, users without much experience with registry editing often cause more problems trying to fix the original problem. Make sure you back up your registry before editing it.

by salujav

use the logon script to set the proxy setting of all the users.
inside this key there are lot of values whcih controls the internet access. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
create a group for the 3rd shift users and add all the 3rd shift users in that group. at the time of login check if the user belongs to the 3rd group the apply the proxy setting according so that users cannot browse the net. and for the other users apply setting so that users can browse the net. and using the GPO disable the registry editing tools.
hope this will help.

by tekkydave

If you have a w2k server with AD, you can setup an Organizational Unit for each shift, right click the OU and go to properties. Click on the Group Policy tab, and add a new GP. Then edit the GP, and you can add tons of restrictions to the OU. Then you just have to drop the users into the appropriate OU. This allows you to put many restrictions on your users, without having to write any scripts, or do anything to the machine locally.

The

by shmaltz

The cleanest and best solution is to use a proxy or ISA server. If you have a Cisco PIX firewall you can use Websense in conjuction with the firewall to control access. Websense can be used without Cisco as well it's just much easier to set up with Cisco.
Websense will allow you to create filters based on AD/NTDomain membership.
It also has it's own lists.
NH2H is another product like Websense.

This discussion is closed to new replies.