Is there a way i can define who can go on the internet and who cant on a network?

Question

I run win2k on my server and the clients run win xp. I have a problematic user who views porn etc. I want to restrict just his account and or computer from internet access. How do i do it? If your answer is to use active directory please explain how i single out that particular user and what seetings i put.

Answer 1

If you have some kind of firewall or you use router to connect to internet. There should be some firewall/router setting that can control which IP Address or MAC address can connect to the internet.
And more advance firewall/router will have even more features like control the time it can connect and even quality control (how much speed they can get), and filter website access using keyword, etc.

Answer 2

Yes.

First, you have to run a firewall. Then you have to run a HTTP proxy (sometimes the same box as the firewall). Then you subscribe to a service such as Cyberpatrol, which is a subscription service.

After that, you'll be able to control 'net access per user, which means you can really crack down on that person, while leaving the boss free to surf porn, er, do business.

The problem with such services is that you've usually got a 50-user minimum for the Cyberpatrol, etc.

There are open-source solutions as well - think "SQUID".

Answer 3

If you block the mac address on the router you block total internet access.

I would suggest to configure/write a new security policy a policy for the particular machine which would prevent the user from accessing certain sites by adding the site to the restricted site zone and then disble the security page so he would be unable to change it

Answer 4

The BEST way is to install ISA Server Firewall and Proxy.

You probably already have something similar anyways (If your network is professional)

Use the ISA Server and block the dude's internet access. Or better yet, you can redirect all his porn websites to another site, ex. yahoo.com ;)

Gluk bud

'*~T~*'

Answer 5

in a routed network u can block and add what u want the user to access.if u want to totaly block this user block the mac in the router,change the access list settings.I would say dude no more porn or your outa here

Answer 6

block the MAC address in the firewall thats the easiest and quickest way

Answer 7

You may try NetDog, http://www.netdogsoft.com
it can define some url blocked or not

Answer 8

NO!!!! you are not thier dad