Page 1 of 1 1
Topic Options
#65398 - 2002-05-12 05:48 PM Deny Network/Internet access
Nexans Offline
Lurker

Registered: 2002-05-12
Posts: 1
I wonder how I can deny access to the internet for ONE user in Windows XP? I get internet from a router running on port 192.168.0.1 and it will work to deny access to that ip, or completely close the network. I assume this will be easy done with a logon-script, but i`m not that into scripting. I don`t care how it`s done only noe of the users can`t get access to the internet.
Top
#65399 - 2002-05-12 10:29 PM Re: Deny Network/Internet access
Kdyer Offline
KiX Supporter
*****

Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
Nexans,

Welcome to the board!

Can't you deactivate this "bad" user from User Manager or Active Directory Users and Computers?

If that is not the case...

code:
if @userid = "jdoe"
$RC = Shutdown("", "Sorry, you do not have access to this network!", 2, 1, 1)
endif

Or..
code:
if @userid = "jdoe" and @wksta = "machineid"
$RC = Shutdown("", "Sorry, you do not have access to this machine!", 2, 1, 1)
endif

If you are wanting this user to be able to login to your network, but not "surf" the Internet or the Network itself; these are Policies that really should be set by Microsoft's Policy Editor.

HTH,

- Kent

[ 13 May 2002, 07:51: Message edited by: kdyer ]
_________________________
Utilize these resources:
UDFs (Full List)
KiXtart FAQ & How to's

Top
#65400 - 2002-05-13 03:13 PM Re: Deny Network/Internet access
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
I think you might need to disable access to certain applications (the ones he's using for Internet access) for that particular user. This way, he can still use resources located on the local network but he'll be unable to e.g. start Internet Explorer to browse the web. Alternatively, coordinate with your Human Resource department because it sounds more like a disciplinary issue. It sounds like that user is misusing a company computer and company resources (network) for things he's not supposed to do. Thus, a friendly reminder from HR might do the trick.
_________________________
There are two types of vessels, submarines and targets.

Top
#65401 - 2002-05-13 03:39 PM Re: Deny Network/Internet access
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
You should use a Proxy server to limit access. That way you control by group, who has access.

The C&D way to hack it in would be to destroy either his Gateway or DNS entry in his IP properties. Which one, would depend if either are used for internal apps. This whole C&D hack however, is security by ignorance.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#65402 - 2002-05-13 10:26 PM Re: Deny Network/Internet access
Anonymous
Unregistered


assuming his lan is 192.168.0.x and some internal
router is 192.168.0.2 , something as the following
for logon will be sufficient.

route delete 0.0.0.0
route add -p 192.168.0.0 mask 255.255.255.0 192.168.0.2 metric 1
route add -p 0.0.0.0 mask 0.0.0.0 127.0.0.1 metric 2

[ 13 May 2002, 22:28: Message edited by: novastar ]

Top
#65403 - 2002-05-13 11:13 PM Re: Deny Network/Internet access
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Doh! Route... why didn't I think of that...

Forgot the client was just XP.

Are you sure you want it -p (persistent)? You would have to reset it for all others.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
Page 1 of 1 1


Moderator:  Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 952 anonymous users online.
Newest Members
ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder, M_Moore
17887 Registered Users

Generated in 0.029 seconds in which 0.013 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org