OT: Any IT guys out there?

[MattACaster]

Quick question....

 

Is there a simple way to block internet access on a specific machine without blocking any LAN services (email, telnet...)? If possible, I'd also like IE to redirect any website request to a page I've created and hosted on the LAN.

[65_289]

Use group policy to set the proxy for that computer to a certain address, and forbid users to change TCP/IP settings.

 

Or, perhaps your router can filter IP addresses. Tell it to filter the IP of that computer, make sure it has a static IP or DHCP reservation, and make sure users cannot change TCP/IP settings.

 

Or, maybe you could delete the default gateway on the computer. Again, if users can change TCP/IP settings, it's all for not.

[dmtnt]

 

Originally posted by 65_289 Or, maybe you could delete the default gateway on the computer. Again, if users can change TCP/IP settings, it's all for not.

 

 

+1. This is how we restrict it. I have the DHCP server only dishing out IP and DNS, not gateway. FYI, this will only work if the other services don't need to get beyond your local network.

[cryptic1911]

if they aren't too savvy you can do it really easy. its kinda cheating, but just go into their ie settings and tell it to use a proxy and set the proxy address to 0.0.0.0 and check the box for bypass proxy for internal addresses and set that page you hosted as their start page

[voodoosmc]

You could also set up a proxy server ( squid for example ) and set up a redictor to the internal page you want. If your network is set to handle it you can make where they have to connect to the net via the proxy.