Prevent Intranet Access

If you want to prevetn access only to the web site of your intranet then you should point the appropriate port (80) in the firewall.
If it is a ipchains you should write something like:
-A input -s 0.0.0.0/0 -d webipaddress/32 80 -p 6 -j DENY
If your firewall is other than ipchain the idea is the same.

Depending on the topology of the network, you might find either of these useful:

If there's a router between the classroom LAN and the company intranet server, you can block all traffic with an originating address in the classroom subnet and destination address of the intranet server's subnet.

Your intranet server may have a feature to limit incoming connections (most do). In this case, you can tell it to deny HTTP and HTTPS requests originating from the classroom subnet.

FWIW, I've known some instructors who simply pull the plug on their classroom's router while they were lecturing, so the students would pay attention. Clearly, that approach depends on what the students need to do during the class.

Good fortune,
Don

By using Group Policies you can segregate workers and students. The student group is only allowed access to the ?class_room? folders and as I read your question outside networks. You can use a generic login for the class to keep it simple and not have to add entries for each new class.

I would do these things for quick "stoppage":

1 - block it at the firewall. You should be able to restrict it there.

2 - set up a false DNS entry for the server in an LMHOSTS file so when they try and access it by name it will not resolve.

This question was closed by the author