banGerprawN
[H]ard|Gawd
- Joined
- Apr 15, 2005
- Messages
- 1,113
I have a stand-alone PC running XP Pro at a separate location that uses an always-on DSL connection. This PC is used by a member of my company that needs access to the Internet, but at the same time is also used by other people (not company employees) that need to have their internet access restricted. These other people have separate user accounts to the company employee.
What I need to be able to do is prevent all access to Internet resources from this PC, but only for specific user accounts. Obviously, it's possible to create an IP Security Policy that blocks all incoming/outgoing traffic, and that works marvellously well, except I'm not sure how to apply it only to certain users or groups.
Editing IE proxy information for each user to point to a non-existent proxy, and then editing their security rights so they cannot change proxy settings is not an option, because I need to stop other programs (not just IE) from accessing the Internet.
Is this possible without using a server/domain?
What I need to be able to do is prevent all access to Internet resources from this PC, but only for specific user accounts. Obviously, it's possible to create an IP Security Policy that blocks all incoming/outgoing traffic, and that works marvellously well, except I'm not sure how to apply it only to certain users or groups.
Editing IE proxy information for each user to point to a non-existent proxy, and then editing their security rights so they cannot change proxy settings is not an option, because I need to stop other programs (not just IE) from accessing the Internet.
Is this possible without using a server/domain?