internet cut off

Hi, is there any way to cut off internet access for a users on a workstation
without changing network settings? I don't wnat to change TCPIP settings,
but have internet access based on login.
thanks

You need ISA or a third party firewall/proxy product to do this.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"andrew" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi, is there any way to cut off internet access for a users on a
workstation
> without changing network settings? I don't wnat to change TCPIP settings,
> but have internet access based on login.
> thanks
>
>

Are you using AD with OUs? If so you can create 2 groups, say, Internet and
No-Internet, and adjust the settings in the ou to the correct settings in
the internet group, and incorrect settings in no-internet group, then they
would not be able to access the net

--
Steven Cooke


"andrew" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi, is there any way to cut off internet access for a users on a
workstation
> without changing network settings? I don't wnat to change TCPIP settings,
> but have internet access based on login.
> thanks
>
>

So there is not block or something inside the IE?

"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> You need ISA or a third party firewall/proxy product to do this.
>
> Doug Sherman
> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
> "andrew" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> > Hi, is there any way to cut off internet access for a users on a
> workstation
> > without changing network settings? I don't wnat to change TCPIP
settings,
> > but have internet access based on login.
> > thanks
> >
> >
>
>

Maybe I misunderstood your question. You can use Group Policy to lock down
IE. Or you can effectively deny Internet access by giving user's phony
proxy server settings - User Configuration\Windows Settings\Internet
Explorer\Connections.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"andrew" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> So there is not block or something inside the IE?
>
> "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> > You need ISA or a third party firewall/proxy product to do this.
> >
> > Doug Sherman
> > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >
> > "andrew" <(E-Mail Removed)> wrote in message
> > news:%(E-Mail Removed)...
> > > Hi, is there any way to cut off internet access for a users on a
> > workstation
> > > without changing network settings? I don't wnat to change TCPIP
> settings,
> > > but have internet access based on login.
> > > thanks
> > >
> > >
> >
> >
>
>

On Mon, 9 Aug 2004 20:44:54 -0500, "andrew" <(E-Mail Removed)> wrote:

>Hi, is there any way to cut off internet access for a users on a workstation
>without changing network settings? I don't wnat to change TCPIP settings,
>but have internet access based on login.

That's exactly the function of a proxy server such as Microsoft's ISA.

Jeff

On Tue, 10 Aug 2004 01:28:21 -0500, "andrew" <(E-Mail Removed)> wrote:

>So there is not block or something inside the IE?

No.

Jeff

>"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
>news:%(E-Mail Removed)...
>> You need ISA or a third party firewall/proxy product to do this.
>>
>> Doug Sherman
>> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>>
>> "andrew" <(E-Mail Removed)> wrote in message
>> news:%(E-Mail Removed)...
>> > Hi, is there any way to cut off internet access for a users on a
>> workstation
>> > without changing network settings? I don't wnat to change TCPIP
>settings,
>> > but have internet access based on login.
>> > thanks
>> >
>> >
>>
>>
>

What Group Policy you're thinking about? On a server or on a workstations?
thanks

In user
"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Maybe I misunderstood your question. You can use Group Policy to lock
down
> IE. Or you can effectively deny Internet access by giving user's phony
> proxy server settings - User Configuration\Windows Settings\Internet
> Explorer\Connections.
>
> Doug Sherman
> MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
>
> "andrew" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > So there is not block or something inside the IE?
> >
> > "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
> > news:%(E-Mail Removed)...
> > > You need ISA or a third party firewall/proxy product to do this.
> > >
> > > Doug Sherman
> > > MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> > >
> > > "andrew" <(E-Mail Removed)> wrote in message
> > > news:%(E-Mail Removed)...
> > > > Hi, is there any way to cut off internet access for a users on a
> > > workstation
> > > > without changing network settings? I don't wnat to change TCPIP
> > settings,
> > > > but have internet access based on login.
> > > > thanks
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Hi there Andrew

We've got something called Browse Control, you can download it from
www.browsecontrol.com

With this you can turn off internet for a particular PC or Group of
PCs, schedule times of day you wish to block internet. You can also
whitelist so users can still access intranet or work related web
sites.

Hope this helps!

Regs
Divyesh


"andrew" <(E-Mail Removed)> wrote in message news:<#(E-Mail Removed)>...
> Hi, is there any way to cut off internet access for a users on a workstation
> without changing network settings? I don't wnat to change TCPIP settings,
> but have internet access based on login.
> thanks

If your design goal is to base Internet access based on login, then you need
ISA Server. If this network is only a single subnet you could just as well
remove his/her default gateway (if they're not an admin they cannot put it
back) but then again you said don't want to change TCPIP settings, so that
really isn't an option for you.

--
Todd J Heron, MCSE
Windows 2003/2000/NT


"andrew" <(E-Mail Removed)> wrote in message
news:#(E-Mail Removed)...
> Hi, is there any way to cut off internet access for a users on a
workstation
> without changing network settings? I don't wnat to change TCPIP settings,
> but have internet access based on login.
> thanks
>
>