Restricting access to the Internet?

Pharaoh · 17-November-05, 01:56 AM

At the restaurant I have a PC that is only used for employee time cards.
It is not currently on a network and must be accessed manually.

I want to add that PC to a LAN for administrative purposes AND restrict all employees but ADMIN users from accessing the internet from that PC.

The Time Card PC is a P3 running XP PRO SP2.

How do you restrict net access on one PC?
Can individual logins be restricted from the net?

Thanks for any helpfull info.

Seikatsu · 17-November-05, 02:45 AM

The easiest option I can think of right is to
Install a firewall (Zonealarm Pro for instance) and have it block access to any browser
or other program and you can change access permissions for any program as needed,
dial the protections back and then lock it back up (Log out button under Overview: Preferences).

mrcracker · 17-November-05, 08:27 AM

Take the IE executable and put deny permissions across the board on it for that usergroup. Very easy solution.

Pharaoh · 17-November-05, 04:45 PM

Quote:

Originally Posted by mrcracker


	Take the IE executable and put deny permissions across the board on it for that usergroup. Very easy solution.

I like the simplicity of that.

But now my simple mind has to ask, how is it done? I've never dabbled in permissions.

By denying IE would that keep F@H form accrssing the NET too?

mrcracker · 17-November-05, 05:24 PM

Not sure about F@H, but I don't think it's impacted, it just uses IE connection settings which are stored elsewhere. To deny them, right click on the iexplore.exe file and choose properties. Go to the security tab and add a user and then click deny on all the options. You may have to disable simple file sharing if you're not on a domain and if you don't see the security tab. That can be done by opening any folder, go to the view tab, and uncheck simple file sharing (last option). You'll have to have the drive formatted as NTFS though.

Pharaoh · 17-November-05, 05:47 PM

Quote:

Originally Posted by mrcracker


	uncheck simple file sharing (last option). You'll have to have the drive formatted as NTFS though.

It is NTFS cause I installed XP on it. but by unchecking simple file sharing wont that keep the PC from
being able to share files with the other PC that will be on the LAN?

Thanks for you input.

mrcracker · 17-November-05, 06:18 PM

Not really, you just have to be a bit more aware of the shares. You just have to configure the read/write/execute permissions on the directory that you share.

I did a quick search on Microsoft.com and came up with the following article: link

It details the equivalent NTFS permissions and their simple file sharing counterparts

17-November-05, 01:56 AM		#1 (permalink)
Pharaoh Apex Tech God	Restricting access to the Internet? At the restaurant I have a PC that is only used for employee time cards. It is not currently on a network and must be accessed manually. I want to add that PC to a LAN for administrative purposes AND restrict all employees but ADMIN users from accessing the internet from that PC. The Time Card PC is a P3 running XP PRO SP2. How do you restrict net access on one PC? Can individual logins be restricted from the net? Thanks for any helpfull info. Last edited by Pharaoh; 17-November-05 at 02:07 AM.

17-November-05, 06:18 PM		#7 (permalink)
mrcracker Apex Master Tech Apprentice	Not really, you just have to be a bit more aware of the shares. You just have to configure the read/write/execute permissions on the directory that you share. I did a quick search on Microsoft.com and came up with the following article: link It details the equivalent NTFS permissions and their simple file sharing counterparts Last edited by mrcracker; 17-November-05 at 06:20 PM. Reason: link to MS.com

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Ars Technica // Wireless Internet access coming to Washingon rest stops	Gizmo	Ars Technica RSS	0	29-August-06 02:02 PM
Ars Technica // AOL may offer free Internet access	Gizmo	Ars Technica RSS	0	06-July-06 12:05 PM
Hijacked IE, Spyware galore and restricting access	Scorpionic	Internet / Network Tweaks	29	22-March-05 01:30 AM
Slashdot // Internet Access and Computer Fraud Laws	Gizmo	Slashdot RSS	0	17-December-04 08:30 PM
Slashdot // 3G Internet Access Via PCMCIA Card	Gizmo	Slashdot RSS	0	22-September-04 02:14 AM

17-November-05, 02:45 AM		#2 (permalink)
Seikatsu Apex Master Tech Apprentice	The easiest option I can think of right is to Install a firewall (Zonealarm Pro for instance) and have it block access to any browser or other program and you can change access permissions for any program as needed, dial the protections back and then lock it back up (Log out button under Overview: Preferences).

17-November-05, 08:27 AM		#3 (permalink)
mrcracker Apex Master Tech Apprentice	Take the IE executable and put deny permissions across the board on it for that usergroup. Very easy solution.

17-November-05, 05:24 PM		#5 (permalink)
mrcracker Apex Master Tech Apprentice	Not sure about F@H, but I don't think it's impacted, it just uses IE connection settings which are stored elsewhere. To deny them, right click on the iexplore.exe file and choose properties. Go to the security tab and add a user and then click deny on all the options. You may have to disable simple file sharing if you're not on a domain and if you don't see the security tab. That can be done by opening any folder, go to the view tab, and uncheck simple file sharing (last option). You'll have to have the drive formatted as NTFS though.