General discussion


Restricted access to internet

By jmcnally ·
I have over 40 machines that are allowed access to the internet via a wireless access point. All are laptops and their OS is a mix of Windows 98 and Windows 2000.
The owner would like to have the laptops restricted to access only their website. No internet browsing.
What would be the best way to accomplish this task?
The laptops are not in a domain or a network. They are just allowed access to a wireless network for the purpose of accessing Internet and their particular site.
I will appreciate any response

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by collignond In reply to Restricted access to inte ...

If you are running a Microsoft server controlling the access to the internet installing a ISA server would probibly be the easiest. Another option is to get a free proxy that aloows for that type of configuration, squid would probibly work.

Collapse -

by Ltop In reply to Restricted access to inte ...


Squid would definately work

let us know how u get on,


Collapse -

by mikeewalton In reply to Restricted access to inte ...

Delete the proxy from your connection settings, and use themmc to lock this.

Collapse -

Restricting Internet Access

by SALES In reply to

There are several ways you can achieve locking down your systems. It depends on the environment, you didn?t mention the workstation OS. If you are running Windows Pro, Vista Pro etc. and you have a domain server you would make the workstations a member of the domain so they can be controlled by the domain. This will force users to log onto the station which may not be desirable in a school. You can also use Sonicwall Firewall to control users I would not recommend Microsoft ISA its poorly designed.

Create a Global Security Group in Active Directory called Internet Access.
Assign users to the group.
Locate the IE.exe file remove all security except System, Domain Admin, and Administrator and then add the new Group Internet Access to the EXE file.

This method should be used to control all applications for users as well. This gives you control fast to allow users in the group on or off access. If you have a budget I would get rid of the workstations completely and use ZM-PXE125 stations with a Terminal Server.

Collapse -

by Toivo Talikka In reply to Restricted access to inte ...

1) Disable DNS or remove the DNS server entries from the TCP/IP Properties.

2) Add the address and domain name of their website to the hosts file, in Windows XP C:\Windows\System32\drivers\etc\hosts.

The format of the entry in hosts is: # company site

If the laptops have email access, you may want to use the IP address of the SMTP and POP3/IMAP server in the mail configuration, to keep the configuration simple.

Collapse -

by jrhampshire In reply to Restricted access to inte ...

Isa Server is a very good option
An other option is using a router with firewall capabilities like SMC and defining IP ranges and protocols that you will allow to access to internet

Related Discussions

Related Forums