Home All Groups Group Topic Archive Search About

Internet and/or Intranet access for selected PCs

Author
23 Sep 2006 1:20 AM
Geoff Briedé
Hello Windows Pundits,

Is it possible to configure some PCs on a network (not on a domain) to be
blocked from Internet access (in both directions) and allow other PCs full
access to the Internet, while allowing full Intranet access to all connected
PCs?  Basically, I'd like to block all Internet access on three of the six
PCs on the same network and workgroup, while allowing all the PCs access to
all the files on all the other PCs.

The network has both Win2K Sp4 and XP Pro Sp2 mchines on it, has a 7-port
DSL DLink router and at least one wireless access point (also DLink).

TIA,

- Geoff

Author
23 Sep 2006 5:47 AM
Steve Winograd [MVP]
In article <uyT6w5q3GHA.5***@TK2MSFTNGP04.phx.gbl>, "Geoff Briedé"
<banopticNO@SPAMsympatico.ca> wrote:
Show quoteHide quote
>Hello Windows Pundits,
>
>Is it possible to configure some PCs on a network (not on a domain) to be
>blocked from Internet access (in both directions) and allow other PCs full
>access to the Internet, while allowing full Intranet access to all connected
>PCs?  Basically, I'd like to block all Internet access on three of the six
>PCs on the same network and workgroup, while allowing all the PCs access to
>all the files on all the other PCs.
>
>The network has both Win2K Sp4 and XP Pro Sp2 mchines on it, has a 7-port
>DSL DLink router and at least one wireless access point (also DLink).
>
>TIA,
>
>- Geoff

To block a computer from Internet access, assign its TCP/IP properties
manually.  Give it an IP address and subnet mask compatible with the
ones that the router's DHCP server assigns.  Don't give the computer a
default gateway or DNS server address.

Anyone who has an account with administrative privileges can change
those settings.  If you don't want someone to be able to do that, give
that person a limited user account.
Author
23 Sep 2006 11:21 AM
Geoff Briedé
Thanks Steve - that works quite nicely.

Regards,

- Geoff



Show quoteHide quote
"Steve Winograd [MVP]" <bcma***@mvps.org> wrote in message
news:cfi9h2h7tqbg4uutrp28aepjgs902ih0r9@4ax.com...
> In article <uyT6w5q3GHA.5***@TK2MSFTNGP04.phx.gbl>, "Geoff Briedé"
> <banopticNO@SPAMsympatico.ca> wrote:
>>Hello Windows Pundits,
>>
>>Is it possible to configure some PCs on a network (not on a domain) to be
>>blocked from Internet access (in both directions) and allow other PCs full
>>access to the Internet, while allowing full Intranet access to all
>>connected
>>PCs?  Basically, I'd like to block all Internet access on three of the six
>>PCs on the same network and workgroup, while allowing all the PCs access
>>to
>>all the files on all the other PCs.
>>
>>The network has both Win2K Sp4 and XP Pro Sp2 mchines on it, has a 7-port
>>DSL DLink router and at least one wireless access point (also DLink).
>>
>>TIA,
>>
>>- Geoff
>
> To block a computer from Internet access, assign its TCP/IP properties
> manually.  Give it an IP address and subnet mask compatible with the
> ones that the router's DHCP server assigns.  Don't give the computer a
> default gateway or DNS server address.
>
> Anyone who has an account with administrative privileges can change
> those settings.  If you don't want someone to be able to do that, give
> that person a limited user account.
Author
23 Sep 2006 3:02 PM
Maincat
You should be able to block specific computers from accessing the Internet
using your router's configuration setup.

Read the manual.

Steve

Show quoteHide quote
"Geoff Briedé" <banopticNO@SPAMsympatico.ca> wrote in message
news:OS5ZEKw3GHA.600@TK2MSFTNGP05.phx.gbl...
> Thanks Steve - that works quite nicely.
>
> Regards,
>
> - Geoff
>
>
>
> "Steve Winograd [MVP]" <bcma***@mvps.org> wrote in message
> news:cfi9h2h7tqbg4uutrp28aepjgs902ih0r9@4ax.com...
>> In article <uyT6w5q3GHA.5***@TK2MSFTNGP04.phx.gbl>, "Geoff Briedé"
>> <banopticNO@SPAMsympatico.ca> wrote:
>>>Hello Windows Pundits,
>>>
>>>Is it possible to configure some PCs on a network (not on a domain) to be
>>>blocked from Internet access (in both directions) and allow other PCs
>>>full
>>>access to the Internet, while allowing full Intranet access to all
>>>connected
>>>PCs?  Basically, I'd like to block all Internet access on three of the
>>>six
>>>PCs on the same network and workgroup, while allowing all the PCs access
>>>to
>>>all the files on all the other PCs.
>>>
>>>The network has both Win2K Sp4 and XP Pro Sp2 mchines on it, has a 7-port
>>>DSL DLink router and at least one wireless access point (also DLink).
>>>
>>>TIA,
>>>
>>>- Geoff
>>
>> To block a computer from Internet access, assign its TCP/IP properties
>> manually.  Give it an IP address and subnet mask compatible with the
>> ones that the router's DHCP server assigns.  Don't give the computer a
>> default gateway or DNS server address.
>>
>> Anyone who has an account with administrative privileges can change
>> those settings.  If you don't want someone to be able to do that, give
>> that person a limited user account.
>
>
Author
23 Sep 2006 6:09 PM
Steve Winograd [MVP]
In article <OS5ZEKw3GHA.***@TK2MSFTNGP05.phx.gbl>, "Geoff Briedé"
<banopticNO@SPAMsympatico.ca> wrote:
Show quoteHide quote
>>>Hello Windows Pundits,
>>>
>>>Is it possible to configure some PCs on a network (not on a domain) to be
>>>blocked from Internet access (in both directions) and allow other PCs full
>>>access to the Internet, while allowing full Intranet access to all
>>>connected
>>>PCs?  Basically, I'd like to block all Internet access on three of the six
>>>PCs on the same network and workgroup, while allowing all the PCs access
>>>to
>>>all the files on all the other PCs.
>>>
>>>The network has both Win2K Sp4 and XP Pro Sp2 mchines on it, has a 7-port
>>>DSL DLink router and at least one wireless access point (also DLink).
>>>
>>>TIA,
>>>
>>>- Geoff
>>
>> To block a computer from Internet access, assign its TCP/IP properties
>> manually.  Give it an IP address and subnet mask compatible with the
>> ones that the router's DHCP server assigns.  Don't give the computer a
>> default gateway or DNS server address.
>>
>> Anyone who has an account with administrative privileges can change
>> those settings.  If you don't want someone to be able to do that, give
>> that person a limited user account.
>
>Thanks Steve - that works quite nicely.
>
>Regards,
>
>- Geoff

You're welcome, Geoff.  :-)