General discussion
-
CreatorTopic
-
March 3, 2005 at 9:18 am #2176735
Setting user access
Lockedby frostyone · about 17 years, 2 months ago
How do I set up a user account that can access most programs but not the internet? The computer is a Dell running XP pro attached to a server running Winserrv 2003.
Topic is locked -
CreatorTopic
All Comments
-
AuthorReplies
-
-
March 3, 2005 at 10:22 am #3330708
Reply To: Setting user access
by darts32 · about 17 years, 2 months ago
In reply to Setting user access
Go to Internet Options in the Control Panel. Go to the Connections tab and click LAN settings. Uncheck Automatically detect settings and then check Use proxy server and put settings in for a proxy server that doesn’t exist. This will time out the Web browser each time a user tries to pull up an Internet site.
2nd Option
You can set the Internet router to deny all port 80 traffic to the WAN from the IP address of the client PC you want to block. This is something that the user is less likely to figure out, and it will effectively block that one PC from Web access, while still allowing all other LAN users full access to the Internet.
3rd option
Go to:
TCP/IP Properties
Advanced
Options
TCP/IP filtering Properties
Select Enable TCP/IP filtering (All adapters)
Select Permit Only for all three selections (TCP, UDP, IP)
Add only the allowed ports that are needed (leaving out port 80 for Web browser traffic)
Click OK multiple times to close out the windows
These settings could also be set in a Group Policy GPO so that the user can’t change them. You would make a special group just for this user.-
March 7, 2005 at 10:22 am #3342154
Reply To: Setting user access
by frostyone · about 17 years, 2 months ago
In reply to Reply To: Setting user access
Poster rated this answer.
-
-
March 3, 2005 at 10:22 am #3330707
Reply To: Setting user access
by darts32 · about 17 years, 2 months ago
In reply to Setting user access
Go to Internet Options in the Control Panel. Go to the Connections tab and click LAN settings. Uncheck Automatically detect settings and then check Use proxy server and put settings in for a proxy server that doesn’t exist. This will time out the Web browser each time a user tries to pull up an Internet site.
2nd Option
You can set the Internet router to deny all port 80 traffic to the WAN from the IP address of the client PC you want to block. This is something that the user is less likely to figure out, and it will effectively block that one PC from Web access, while still allowing all other LAN users full access to the Internet.
3rd option
Go to:
TCP/IP Properties
Advanced
Options
TCP/IP filtering Properties
Select Enable TCP/IP filtering (All adapters)
Select Permit Only for all three selections (TCP, UDP, IP)
Add only the allowed ports that are needed (leaving out port 80 for Web browser traffic)
Click OK multiple times to close out the windows
These settings could also be set in a Group Policy GPO so that the user can’t change them. You would make a special group just for this user. -
March 4, 2005 at 8:41 am #3329906
Reply To: Setting user access
by frostyone · about 17 years, 2 months ago
In reply to Setting user access
Ok, a little clarification. I am just the janitor that got handed the IT hat. Next I cannot lock the machine off the internet because it is used by others for actual work. I just need to set a user with a limited account that can access the server and various functions on the desktop but not be able to access the internet. (step by step instructions are a must here)
-
March 7, 2005 at 10:22 am #3342153
Reply To: Setting user access
by frostyone · about 17 years, 2 months ago
In reply to Setting user access
This question was closed by the author
-
-
AuthorReplies