Dear Friends

I have newly installed Windows 2003 server can any one help me how can I make restriction over my network for using internet from client PC my network is simply working on workgroup and I am using INTERNET CONNECTION SHARING do I have to installed any third part software Yes or Not let me know.

Awaiting for your positive reply as soon as posible

Regards
Zeeshan Noor Ali
Cell: 92-21-345-2178858

I know very little about servers -- but want to try to help

Hope my search helps you find the answer your're looking for

installed Windows 2003 server -how can i make restriction over my network for useing internet from client pc - Google Search

If I helped please rate my answer -- if not please understand

Internet Connection Sharing is not meant to work as a Proxy Server. A Proxy Server allows you to set up rules that allows and disallows users Internet access based on their group membership or user name.

This does not mean that what you are asking is impossible, just not administered centrally from a server. There are a few ways to accomplish your goal in order of my personal preference:

Method 1
Stop using Internet Connection Sharing and purchase a basic router (assuming you have Cable/DSL) and use the features within the router to block the MAC Address of the computer you do not want to have Internet access. The MAC Address for the Network card remains the same regardless of what IP address has been assigned to the computer. You will have the option of using DHCP Server on your router or Windows 2003 Server or both assuming that each is assigned a unique Scope within your Network ID.

Method 2
Assuming that your Windows 2003 server is also running a DHCP server, note the Scope of addresses that it is handing out. For example, if your DHCP server is allocating 172.168.1.100 to 254 then choose an IP address that is NOT within the Scope and manually assign it to the PC that you do not want to have Internet access. You will need to go into the TCP/IP properties of the PC and change it from DHCP to an assigned address. One important thing you will do is LEAVE BLANK the Gateway address. Without this address, the computer can communicate within home/office network only. It will not know what route to take to get out to the Internet.

Method 3
Since browsing on the Internet requires Port 80 for HTTP, you can set your network adapter TCP/IP configuration advanced settings to use filtering. This can get very messy because it can only be set to Allow All or Allow Specific and not Deny Specific TCP Ports, UDP Ports and/or Protocols. This means you would have to enter all of the Port numbers or Protocols to allow. This list would be very long and you would probably have some undesirable effects.

Addendum to previous post:

Microsoft ISA Server is pricey for home and small business use, but there are some inexpensive and free proxy servers that you can toy with. A Google search came up with a few -
Download Proxy Servers - Softpedia